Cybersecurity researchers have discovered a new ‘Stealit’ info-stealing malware campaign that exploits an experimental Node.js feature.

JavaScript is a text-based programming language that's commonly used to make webpages more dynamic and interactive for visitors.

Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.