
Beware: Fraudulent WhatsApp API Package on npm Compromises Your Messages, Contacts, and Login Tokens
Cybersecurity researchers have uncovered a malicious package in the npm repository, posing as a legitimate WhatsApp API tool while secretly compromising user accounts. Named "lotusbail," this package has been downloaded over 56,000 times since its appearance in May 2025, with




