Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
- Posted on December 22, 2025
- By The Hacker News
- 4 Views
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56,000 downloads.
