Information security
fromTheregister
3 weeks agoPoisoned WhatsApp API package steals messages and accounts
A malicious npm package named lotusbail functions as a WhatsApp Web API, steals authentication tokens, messages, contacts, media, and backdoors user accounts.