Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account. The package, named "lotusbail," has been downloaded over 56,000 times since it was first uploaded to the registry by a user named "
source https://thehackernews.com/2025/12/fake-whatsapp-api-package-on-npm-steals.html
Monday, December 22, 2025
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box