Tag: account takeover via device pairing

Poisoned npm WhatsApp API package steals messages, credentials and accounts

TL;DR A malicious npm package called lotusbail, downloaded over 56,000 times and available for roughly six months, impersonated a WhatsApp…