That WhatsApp API you downloaded? It’s stealing everything.
A fake npm package posing as a WhatsApp Web API has been downloaded over 56,000 times in six months. Security researchers warn it’s especially dangerous because it actually works, stealing all user data and backdooring accounts permanently.