SecurityThe Hacker Newsabout 3 hours ago
101 Malicious npm Packages Hijack WhatsApp Accounts
3 min read
OX Security found 101 npm packages that abuse the Baileys WhatsApp library to silently add developers to groups and channels. The packages have been downloaded 490,000 times, including 116,000 in the last 30 days. Three variants fetch or embed channel IDs, mostly promoting Indonesian bot and game-resource sellers. Developers should check for unauthorized group memberships and block the packages.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMeta
