Security News 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent TheHackerNews Daniel Bender 29 Sep 2026 Share 101 npm packages in PhantomSub abuse Baileys to add WhatsApp users to groups without consent, with 490,000 downloads in total. (