discovered
exiouss is identified in the SafeDep analysis "exiouss: Cookie Stealer Bundled in npm Exam Cheat". exiouss on npm is the latest package from the loltestpad campaign — the same attacker who published the ixpresso-core Windows RAT in April. It bundles a dormant ChatGPT cookie stealer alongside an AI exam cheating tool, targeting students who willingly run it.