supply-chain
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Medium
Summary
Researchers at OX Security have identified 101 malicious npm packages that are being used to trick developers into joining WhatsApp groups without their consent. The packages utilize modified versions of the ‘Baileys’ WhatsApp project to add developers to groups controlled by malicious actors, who are then promoting mobile games and applications.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data