Get the latest tech news
Lotusbail npm package found to be harvesting WhatsApp messages and contacts
The lotusbail npm package presents itself as a WhatsApp Web API library - a fork of the legitimate @whiskeysockets/baileys package. With over 56,000 downloads and functional code that actually works as advertised, it's the kind of dependency developers install without a second thought.
None
Or read this on Hacker News
