Malicious code in @fazzcodestudio/baileys (npm)

The @fazzcodestudio/baileys npm package has been identified as containing malicious code that grants full control of the infected computer to an attacker. Installation or execution of this package results in a complete system compromise, risking exposure of all stored secrets and keys. The threat actor may have installed additional malicious software beyond the package itself, making remediation complex. The package should be removed promptly, and all credentials and secrets must be rotated from a secure environment.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the system are at risk of exposure. The attacker may have persistent access through additional malicious software beyond the package, making the system untrustworthy even after package removal.

Remove the @fazzcodestudio/baileys package immediately from all affected systems. Rotate all secrets, keys, and credentials from a different, uncompromised computer. Due to the potential for persistent malicious software, consider rebuilding or thoroughly cleaning affected systems to ensure full remediation.