PhantomSub campaign uses 101 npm packages to add developers to WhatsApp groups

The malicious npm packages, collectively downloaded 490,000 times, exploit the "Baileys" WhatsApp open-source project to subscribe developers to various WhatsApp groups.