Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens


Author: RADIO007 December 23, 2025 Duration: 5:17
Podcast episode
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account.

www.osintinvestigate.com

More episodes

Duration: 16:43
Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect them?

Logo
Select station
VOL