Information security
fromTheregister
1 month agoPoisoned WhatsApp API package steals messages and accounts
A malicious npm package named lotusbail functions as a WhatsApp Web API, steals authentication tokens, messages, contacts, media, and backdoors user accounts.