A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...
The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp ...
According to a report by BleepingComputer, security researchers have found a 'malicious package on the Node Package Manager ...