Malicious WhatsApp API Package on npm Compromises Developer Accounts

Malicious WhatsApp API Package on npm Compromises Developer Accounts

First seen 24 Dec 2025, 20:10 UTC •ThehackernewsOpensourceforu •20.3

Article Content

Browse articles
ThreatCluster

A malicious npm package posing as a WhatsApp API library has been identified, leading to the theft of developer credentials. This incident reflects vulnerabilities in open-source tools, with the package capable of stealing messages, contacts, and login tokens. Developers using this package are at risk of credential compromise and data loss.

How this analysis works

Extracted Entities

1 / 2