Malicious code in cloud-baileys (npm)

The cloud-baileys npm package, specifically versions 1.0.0 through 1.1.42, contains embedded malicious code that compromises any system on which it is installed or executed. This compromise can result in an attacker gaining full control over the affected computer, including access to sensitive secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced by the attacker.

Systems with the affected cloud-baileys package installed are considered fully compromised. Attackers may have gained complete control over the system, risking exposure and theft of all stored secrets and keys. This can lead to further unauthorized access and potential lateral movement within the victim's environment.

Remove the cloud-baileys package immediately from affected systems. Rotate all secrets and keys that were stored or accessible on the compromised system, performing this rotation from a different, trusted computer. Due to the potential persistence of malicious software beyond the package itself, consider a full system investigation and remediation to ensure complete removal of the threat.