> Malicious npm package steals WhatsApp accounts and messages
[AUTHOR: Bill Toulas]
[DATE: 22/12/2025 16:08]
[LANGUAGE: EN]
A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect contacts, and gain access to the account. [...]