Malicious code in @diezyclutch/baileys (npm)

The @diezyclutch/baileys npm package was identified by Amazon Inspector and GHSA malware sources as containing malicious code or depending on malicious code. Any system with this package installed or running should be considered fully compromised. The malicious code can lead to complete control over the affected system by an outside entity. The recommended response is to remove the package and rotate all secrets and keys from a secure, unaffected computer. Due to the severity of the compromise, removal of the package alone may not guarantee full remediation.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and must be rotated. The attacker may maintain persistent access even after package removal.

Remove the @diezyclutch/baileys package immediately. Rotate all secrets and keys from a different, secure computer. Consider the affected system fully compromised and perform a thorough investigation and remediation beyond just package removal.