Lotusbail npm package found to be harvesting WhatsApp messages and contactsComments on Hacker News | Source