Malicious code in @yudzxml/baileys (npm)

The @yudzxml/baileys npm package has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected computer, potentially allowing an attacker full control. Due to the severity of the compromise, all secrets and keys stored on the affected system should be rotated immediately from a separate, secure environment. Removal of the package alone is insufficient to ensure complete remediation, as the attacker may have installed additional persistent malicious components.

Full system compromise on any computer with the package installed or running. All stored secrets and keys are at risk and should be considered compromised. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the @yudzxml/baileys package immediately. Rotate all secrets and keys from a different, uncompromised computer. Conduct a thorough investigation and remediation of the affected system to identify and remove any additional malicious software or backdoors. Do not rely solely on package removal for cleanup.