Malicious code in @fidzzhost/baileys (npm)

The @fidzzhost/baileys npm package has been identified as containing malicious code that compromises the host system upon installation or execution. This compromise is severe enough to consider the affected computer fully controlled by an attacker. The malicious package can lead to exposure of all secrets and keys stored on the system. Due to the depth of compromise, simply uninstalling the package may not eradicate all malicious components. The advisory strongly recommends rotating all credentials from a separate, secure environment to mitigate the impact.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk of exposure. The attacker may maintain persistent access beyond removal of the package.

Remove the @fidzzhost/baileys package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control of the system may have been given to an attacker, consider the system untrusted and perform a full forensic investigation and remediation as needed.