Malicious code in @xatancchii/natabaileys (npm)

The @xatancchii/natabaileys npm package is identified as malicious. Installation or execution of this package results in full compromise of the host system. The package may install backdoors or other malicious components that persist beyond its removal. Due to the severity of the compromise, all credentials and secrets stored on the affected system must be rotated from a separate, uncompromised environment to prevent further unauthorized access.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control over the system, potentially accessing or exfiltrating sensitive data, credentials, and keys. The compromise may persist even after removal of the package, posing ongoing security risks.

Remove the @xatancchii/natabaileys package immediately. Rotate all secrets, keys, and credentials stored on the compromised system from a different, secure computer. Because the system may be fully compromised, consider rebuilding or replacing the affected machine to ensure complete remediation.