101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

T2Covered by 1 source · first reported by The Hacker News at 29 Sept, 13:45 UTC

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX…