Worrying WhatsApp attack can steal messages and even accounts - here's how to stay safe from "poisoned" attack
A fork of a popular project was found on npm, but not before it amassed tens of thousands of downloads.
<ul><li>Malicious NPM package lotusbail hijacks WhatsApp accounts, stealing tokens, messages, and contacts</li><li>Attackers link their device via WhatsApp pairing, persisting even after package remo… [+2752 chars]