101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

Дата публикации: 29-09-2026 13:45:10

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub.
"The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko said in a technical

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Проверьте WhatsApp прямо сейчас. 101 npm-пакет тайно подписывал аккаунты на чужие каналы	0	20.53	30-09-2026
2	Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls	0	5.29	24-09-2026
3	AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub	0	9.27	30-09-2026
4	Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures	0	7.99	30-09-2026
5	US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access	0	15.78	30-09-2026
6	Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor	0	8.01	29-09-2026
7	Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials	0	6.19	29-09-2026
8	PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence	0	9.51	25-09-2026
9	Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content	0	12.24	24-09-2026
10	Fake Passkey Prompts Are Targeting Microsoft 365 Users; Here's What to Check	0	8.26	29-09-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 7.18. Источник: thehackernews.com.