✉news TechnologySoftware first seen 13 h ago, last 4 h ago, peak #23
101 Malicious npm Packages Found Adding Developers to WhatsApp Groups
Original: 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Security researchers have identified 101 malicious npm packages that secretly add developers' WhatsApp accounts to groups without their consent. The packages pose as legitimate tools to trick developers into installing them, after which they abuse WhatsApp's click-to-chat functionality to enroll victims in groups, potentially for scam or spam purposes. Developers are advised to audit dependencies and remove any affected packages.
Why now: A newly discovered supply chain attack on the npm ecosystem puts thousands of developers at risk, prompting urgent warnings.
Rank over time, top of the chart is #1. 4 snapshots from 10 h ago to 4 h ago.
Evidence
- 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent · thehackernews.com
API: https://socialmediatrends-api.osmike.com/v1/trends/392470