The @sauruslord/baileys npm package is identified as containing malicious code that compromises the host system completely. Installation or execution of this package can lead to full system compromise, including exposure of stored secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. This threat is classified as a malicious package rather than a traditional vulnerability, and no CVSS score or patch information is available.

Any system with the @sauruslord/baileys package installed or running should be considered fully compromised. Attackers may have gained full control over the system, including access to all stored secrets and keys. This can lead to unauthorized data access, credential theft, and persistent malicious presence on the affected machine.

Remove the @sauruslord/baileys package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted computer. Because full system compromise is likely, consider rebuilding affected systems to ensure complete removal of malicious software.