Information security
fromTheregister
6 hours agoPoisoned WhatsApp API package steals messages and accounts
A malicious npm package named lotusbail functions as a WhatsApp Web API, steals authentication tokens, messages, contacts, media, and backdoors user accounts.