Read More 3 minute read Privacy Security Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats Koi Security uncovers lotusbail, a malicious npm package with 56K downloads that steals WhatsApp messages and installs a persistent backdoor. Learn how to protect your data. byDeeba AhmedDecember 26, 2025