Malicious NPM package lotusbail hijacks WhatsApp accounts, stealing tokens, messages, and contacts Attackers link their ...