101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
More on WhatsApp
Other advisories
- Highosv:MAL-2026-18411Malicious code in neuralwhatsapp (npm)
- Not ratedsingcert:ad-2026-013Advisory on Malware Campaigns Spreading Through WhatsApp
- Not ratedosv:CVE-2026-112380Missing authorization in the WhatsApp channel in Kiro Crew
- CriticalCVE-2026-92097Das Click to Chat for WhatsApp-Plugin für WordPress ist anfällig für beliebige Shortcode-Ausführung in Versionen bis einschließlich 4.
- CriticalCVE-2026-77177Die Open GenAI Stack (aka ogx-ai) 2026-06-11, wie sie im Meta AI Backend für WhatsApp und andere Produkte verwendet wird, ermöglicht die Aus...
- Not ratedosv:CVE-2026-100532openclaw WhatsApp before 2026.8.1 Authentication Bypass
- HighCVE-2026-100532Bei @openclaw/whatsapp (npm) vor Version 2026.
- HighCVE-2026-100532OpenClaw Whatsapp: fehlende Autorisierung
Other news entries
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy RegulatorsNewsThe Hacker News
- State Bank of India confirms customer data exposed on the dark webBreachpwn.watch
- ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More StoriesNewsThe Hacker News
- Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery PathNewsThe Hacker News
- Windows, Linux, Android File Notification Systems Leak User ActivityNewsSecurityWeek
- Russian Hackers Phish EU Officials Over Messaging AppsNewsDark Reading
- WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and AndroidNewsThe Hacker News
- WhatsApp adds stronger two-step verification, multiple passkeysNewsBleepingComputer
Source: https://thehackernews.com/2026/09/101-malicious-npm-packages-add.html
ID