{"ok":true,"trend":{"id":392470,"platform":"news","region":"global","key":"101 malicious npm packages add developers' whatsapp accounts to groups without consent","title":"101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent","url":"https://news.google.com/rss/articles/CBMieEFVX3lxTFBEdWlHN0NsME44b0dvMTRWeTdMb0ItX2lNbUZnTkJNOGFGR3BneWtlT1lOaHQ4U3NuZm41S0Q4eGZiYVpQVV9maFIybjZ0N2xTdzNKaXVkVEdXWGNaQkpONVJUUVlYVEJwakY4dlNhdEZna0VUYXhIYw?oc=5","first_seen":"2026-09-29T19:07:53.815362Z","last_seen":"2026-09-30T04:43:09.739535Z","last_rank":34,"peak_rank":23,"last_volume":null,"peak_volume":0,"seen_count":6,"score":26.93,"category_hint":"software","section":"technology","category":"software","summary":"Security researchers have identified 101 malicious npm packages that secretly add developers' WhatsApp accounts to groups without their consent. The packages pose as legitimate tools to trick developers into installing them, after which they abuse WhatsApp's click-to-chat functionality to enroll victims in groups, potentially for scam or spam purposes. Developers are advised to audit dependencies and remove any affected packages.","why":"A newly discovered supply chain attack on the npm ecosystem puts thousands of developers at risk, prompting urgent warnings.","tone":"negative","entities":["npm","WhatsApp","The Hacker News"],"summarized_at":"2026-09-30T07:18:09.840615Z","meta":{"via":"scan","lang":"en","term":"open source","source":"The Hacker News","published":"Tue, 29 Sep 2026 13:45:00 GMT"},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"101 Malicious npm Packages Found Adding Developers to WhatsApp Groups","section_name":"Technology","category_name":"Software","timeline":[{"captured_at":"2026-09-29T19:07:53.815362Z","rank":23,"volume":null},{"captured_at":"2026-09-29T20:29:53.773843Z","rank":28,"volume":null},{"captured_at":"2026-09-29T21:51:54.679605Z","rank":31,"volume":null},{"captured_at":"2026-09-29T23:13:54.369421Z","rank":32,"volume":null},{"captured_at":"2026-09-30T00:36:08.206046Z","rank":32,"volume":null},{"captured_at":"2026-09-30T04:43:09.739535Z","rank":34,"volume":null}],"posts":[{"platform":"news","url":"https://news.google.com/rss/articles/CBMieEFVX3lxTFBEdWlHN0NsME44b0dvMTRWeTdMb0ItX2lNbUZnTkJNOGFGR3BneWtlT1lOaHQ4U3NuZm41S0Q4eGZiYVpQVV9maFIybjZ0N2xTdzNKaXVkVEdXWGNaQkpONVJUUVlYVEJwakY4dlNhdEZna0VUYXhIYw?oc=5","author":"thehackernews.com","title":"101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent","snippet":null,"posted_at":"2026-09-29T13:45:00Z","likes":null}],"elsewhere":[],"window":"7d"}}