OX Security says 101 packages abuse a WhatsApp library to sign victims' bot sessions up for groups they never chose.
Attackers are hammering internet-facing Vite development servers to pull AWS and Azure credentials and infrastructure state files.