The @astralcore/aura-wb npm package contains embedded malicious functionality that compromises the security and privacy of users' WhatsApp accounts. Its default configuration uses a hardcoded MongoDB URI with embedded credentials pointing to a shared Atlas cluster controlled by the package author. When the bot is started without overriding this URI, it writes the full Baileys WhatsApp credentials and signal keys (including noise key, identity key, registration, and session keys) to the shared database, effectively exposing complete control over the WhatsApp account to the author or any party with database access. The package also continuously polls the database for commands that can manipulate the WhatsApp session to perform actions such as following, reacting to, or reading messages from arbitrary channels. Furthermore, it sends host system information to a Telegram bot owned by the author, enabling real-time monitoring of deployments. The presence of a Google Tenor API key is noted but its impact is unclear. The affected versions explicitly identified are 1.0.0, 1.0.1, and 1.0.4. There is no indication of an official patch or fix.

This malicious package compromises user privacy and security by exfiltrating sensitive WhatsApp session credentials and keys to an author-controlled database, enabling full account takeover. It allows the attacker to remotely control the victim's WhatsApp account to perform arbitrary actions such as following channels, reacting to messages, and reading messages without user consent. The package also leaks host environment information to the attacker, potentially aiding further targeted attacks or surveillance. The shared database credentials mean all users of the package are exposed to the same risk. There is no evidence of active exploitation in the wild, but the potential for abuse is significant.

No official patch or remediation is currently documented. Users should immediately discontinue use of the @astralcore/aura-wb package versions 1.0.0, 1.0.1, and 1.0.4 due to embedded malicious code. Avoid installing or running this package, and if already installed, remove it and revoke any WhatsApp sessions potentially compromised. Monitor for unauthorized WhatsApp activity and consider resetting WhatsApp credentials. Since the package uses hardcoded credentials to a shared database, overriding the MONGODB_URI configuration to a private, secure database would prevent credential exfiltration, but this does not mitigate the presence of other malicious code. No vendor advisory or patch is available; check for updates from trusted sources before considering reuse.