Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence. Security researchers have uncovered a ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect contacts, and gain access to the account. A fork of ...

From typos to takeovers: Inside the industrialization of npm supply chain attacks A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to ...

Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.