The @zannstore/baileys npm package versions 2.2.6 through 2.4.4 contain malicious code that, when installed or executed, fully compromises the host computer. This compromise allows an attacker to gain complete control over the system. Due to the severity of the compromise, all credentials and keys stored on the affected system must be rotated from a different, uncompromised machine. Removal of the package does not ensure full remediation as additional malicious components may persist.

Full system compromise on any computer running or having installed the affected versions of the @zannstore/baileys package. This includes potential unauthorized access to all stored secrets and keys, which must be considered compromised and rotated immediately. The attacker may maintain persistent control beyond the presence of the package itself.

Remove the @zannstore/baileys package immediately from all affected systems. Rotate all secrets, keys, and credentials from a separate, secure device that has not been compromised. Because the system may be fully controlled by an attacker, consider rebuilding or restoring the system from a known good backup to ensure complete removal of malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.