Diamond Member ThaHaka 0 Posted December 22, 2025 Diamond Member Share Posted December 22, 2025 This is the hidden content, please Sign In or Sign Up Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account. The package, named "lotusbail," has been downloaded over 56,000 times since it was first uploaded to the registry by a user named " This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/294033-h4ckn3wsfake-whatsapp-api-package-on-npm-steals-messages-contacts-and-login-tokens/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.