The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...
A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...