Malicious code in @rixxcodex/baileys (npm)
The @rixxcodex/baileys npm package is a fork of the Baileys WhatsApp library that includes undocumented functionality allowing the package author to perform actions on the installer's authenticated WhatsApp session at runtime. It loads remote, mutable JSON lists from GitHub URLs and uses them to execute queries on the connected WhatsApp account without user knowledge. Additionally, it depends on a cryptographic library fetched directly from a GitHub repository without integrity verification, introducing further risk. These behaviors are not documented and could enable unauthorized account actions.
AI Analysis
Technical Summary
The @rixxcodex/baileys package contains malicious code that adds three undocumented channels leveraging the installer's authenticated WhatsApp session to perform author-chosen account actions at runtime. It unconditionally loads base64-encoded URLs pointing to mutable JSON files hosted on GitHub, which dictate queries executed on the WhatsApp session. The package also includes a cryptographic dependency (@rixxcodex/libsignal) sourced directly from a GitHub repository's HEAD without commit or tag locking, allowing arbitrary code execution within the Signal session-encryption path. These actions occur without user consent or documentation, posing a significant security risk.
Potential Impact
This malicious package can perform unauthorized actions on the user's WhatsApp account by using the authenticated session to execute queries controlled by the attacker. The runtime-mutable remote lists allow the attacker to change the behavior dynamically. The unverified cryptographic dependency further increases the risk of executing arbitrary code within sensitive encryption components, potentially compromising message confidentiality and account integrity.
Mitigation Recommendations
No official patch or remediation is currently available. Users should immediately discontinue use of the @rixxcodex/baileys package versions 8.0.15, 8.0.16, 8.1.0, and 8.2.0. Avoid installing packages that pull dependencies directly from GitHub repositories without integrity checks. Review and audit all third-party dependencies for unauthorized or undocumented behavior. Monitor for updates from the package author or npm advisories for any forthcoming fixes.
Malicious code in @rixxcodex/baileys (npm)
Description
The @rixxcodex/baileys npm package is a fork of the Baileys WhatsApp library that includes undocumented functionality allowing the package author to perform actions on the installer's authenticated WhatsApp session at runtime. It loads remote, mutable JSON lists from GitHub URLs and uses them to execute queries on the connected WhatsApp account without user knowledge. Additionally, it depends on a cryptographic library fetched directly from a GitHub repository without integrity verification, introducing further risk. These behaviors are not documented and could enable unauthorized account actions.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The @rixxcodex/baileys package contains malicious code that adds three undocumented channels leveraging the installer's authenticated WhatsApp session to perform author-chosen account actions at runtime. It unconditionally loads base64-encoded URLs pointing to mutable JSON files hosted on GitHub, which dictate queries executed on the WhatsApp session. The package also includes a cryptographic dependency (@rixxcodex/libsignal) sourced directly from a GitHub repository's HEAD without commit or tag locking, allowing arbitrary code execution within the Signal session-encryption path. These actions occur without user consent or documentation, posing a significant security risk.
Potential Impact
This malicious package can perform unauthorized actions on the user's WhatsApp account by using the authenticated session to execute queries controlled by the attacker. The runtime-mutable remote lists allow the attacker to change the behavior dynamically. The unverified cryptographic dependency further increases the risk of executing arbitrary code within sensitive encryption components, potentially compromising message confidentiality and account integrity.
Mitigation Recommendations
No official patch or remediation is currently available. Users should immediately discontinue use of the @rixxcodex/baileys package versions 8.0.15, 8.0.16, 8.1.0, and 8.2.0. Avoid installing packages that pull dependencies directly from GitHub repositories without integrity checks. Review and audit all third-party dependencies for unauthorized or undocumented behavior. Monitor for updates from the package author or npm advisories for any forthcoming fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-16483
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["npm"]
Threat ID: 6ab4be82f7a7c54106f0dedf
Added to database: 09/24/2026, 06:09:06 UTC
Last enriched: 09/24/2026, 06:54:41 UTC
Last updated: 09/24/2026, 17:21:18 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.