Researchers have discovered a cluster of 101 malicious npm packages targeting developers. These packages abuse the Baileys open-source library to automatically add victims’ WhatsApp accounts to specific spam groups without their consent, in a campaign dubbed PhantomSub.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →