← Back to the feed

~/article/101-malicious-npm-packages-add-developers-whatsapp-accounts-to-groups-wi-w329li
infoSource: The Hacker News

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko said in a technical

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Related

~/related/101-malicious-npm-packages-add-developers-whatsapp-accounts-to-groups-wi-w329li