Malicious npm package steals WhatsApp accounts and messages
(bleepingcomputer.com)
1.
2.
150,000 Packages Flood NPM Registry in Token Farming Campaign
(darkreading.com)