Information security
fromThe Hacker News
11 hours agoFake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
A malicious npm package named 'lotusbail' functions as a WhatsApp API while stealing authentication tokens, messages, contacts, media, and creating persistent account access.