17 hours ago   securityweek

NPM Package With 56,000 Downloads Steals WhatsApp Credentials, Data

The package provides legitimate functionality to evade detection, while stealing users’ data and deploying a ...

12 hours ago   techradar.com

Worrying WhatsApp attack can steal messages and even accounts - here's how to stay safe from "poisoned" attack

· Malicious NPM package lotusbail hijacks WhatsApp accounts, stealing tokens, messages, and contacts · Attackers ...

1 day, 12 hours ago   theregister.co.uk

Poisoned WhatsApp API package steals messages and accounts

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web ...