News

Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats

  • Deeba Ahmed--HackRead
  • published date: 2025-12-26 14:58:49 UTC

Koi Security uncovers lotusbail, a malicious npm package with 56K downloads that steals WhatsApp messages and installs a persistent backdoor. Learn how to protect your data.

Cybersecurity researchers from Koi Security have issued a major warning for anyone building or using applications that connect to WhatsApp. Their research has identified a popular piece of code that … [+3412 chars]