Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens


Author: RADIO007 December 23, 2025 Duration: 5:17
Podcast episode
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account.

www.osintinvestigate.com

More episodes

Duration: 3:48
Gold benefits from intense risk-aversion on Monday and climbs to the $5,400 region, setting a fresh monthly-high in the process. Tensions in the Middle East remain high as Israel and Hezbollah continue to exchange strike…

Logo
Select station
VOL