The lotusbail NPM package steals WhatsApp credentials, messages, and contacts, and provides persistent access to the victims’ accounts.
Taking over WhatsApp accounts "The package wraps the legitimate WebSocket client that communicates with WhatsApp. Every ...
According to a report by BleepingComputer, security researchers have found a 'malicious package on the Node Package Manager (NPM)' that pretends to be a genuine WhatsApp Web API library. In reality, ...