https://www.theregister.com/2025/12/22/whatsapp_npm_package_message_steal/
Poisoned WhatsApp API package steals messages and accounts • The Register
whatsapp apipackage steals
https://www.bleepingcomputer.com/news/security/malicious-npm-package-steals-whatsapp-accounts-and-messages/
Malicious npm package steals WhatsApp accounts and messages
A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect contacts,...
malicious npm packagesteals
https://www.climatechangenews.com/2025/11/19/cop30-bulletin-day-9-china-and-russia-push-back-on-critical-minerals-mention-in-draft-text/
COP30 Bulletin Day 9: Belém package elusive as Lula steals the show
bulletindaypackageelusivelula