Malicious NPM Package Exploits WhatsApp Authentication with Remote Kill Switch