The npm package buyerdashboard@45.3.4 contains malicious code that executes during installation. Its preinstall script runs a Node.js script that sends a request to an external domain with a hardcoded authorization token, disclosing the installing host's public IP and metadata without user consent. The package also depends on a suspicious similarly named package that shadows a core Node module, indicating potential dependency confusion. The package's metadata and versioning suggest it is designed to evade detection and perform unauthorized data exfiltration.
CVE-2026-103904 is a high-severity cross-site scripting (XSS) vulnerability in JTL-Shop by JTL-Software GmbH. The issue arises because the public consent endpoint accepts arbitrary consent names from unauthenticated users without validation. These names are stored and later rendered without proper output encoding in the administration backend. This allows an unauthenticated attacker to inject malicious script code that executes in the browser session of an administrator viewing the consent statistics page, potentially enabling actions with administrator privileges.
The Record of Consent Extension for Complianz WordPress plugin versions up to and including 2.5 is vulnerable to a stored Cross-Site Scripting (XSS) flaw via the 'uid' parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The vulnerability is exacerbated because the nonce used for enforcement is exposed to unauthenticated frontend visitors, and no capability or role checks restrict the write path.
Roo-Code versions up to 3.54.0 have a command approval bypass vulnerability in the parseCommandLine() function. This flaw allows attackers to bypass command restrictions by using command substitutions adjacent to glob characters like * or ?. When auto-approval is enabled, crafted commands such as echo *$(...) can execute denied commands without user consent.
The npm package @wenzyx1/bails versions 1.0.0 and 1.0.1 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing authenticated FOLLOW queries using the victim's session. The targeted channels are obfuscated or dynamically fetched to avoid detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @sairidev/baileys-new version 0.3.21 contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. The malicious action leverages the authenticated WhatsApp session of the installer by injecting covert subscription commands into the WhatsApp socket connection. The targeted channels are obfuscated or dynamically fetched, allowing attackers to change targets after installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The @saazkira/baileys npm package versions 2.1.6 through 2.1.9 contain malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting a covert subscription action into the WhatsApp socket layer using the installer's authenticated session. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code.
The npm package @revizahoshii/baileys contains malicious code that silently subscribes a victim's WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting covert subscription actions into the WhatsApp socket layer using the installer's authenticated session. The targeted channels are obfuscated or dynamically fetched, allowing attackers to modify targets after installation. The malicious code does not steal credentials, maintain persistence, or enable remote code execution.
The npm package @revizahoshii/hoshino version 1.1.0 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, allowing attackers to modify targets after installation. The malicious code abuses the authenticated session but does not steal credentials, maintain persistence, or execute arbitrary code.
The baileys-xbats npm package is a malicious fork of the Baileys WhatsApp Web library that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This behavior affects versions 1.0.0 through 1.0.3. The malicious code issues authenticated FOLLOW queries using the victim's own WhatsApp session. The attack does not involve credential theft, persistence, or remote code execution.
The npm package @fhkryxv/baileys versions 1.0.1 and 1.0.3 contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This action is performed by injecting a covert subscription command into the WhatsApp socket layer using the installer's authenticated session. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @fhkryxv/baileys-new version 0.3.22 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, allowing attackers to change subscription targets after installation. This malicious behavior does not steal credentials, maintain persistence, or execute arbitrary code remotely.
The npm package @astracode/byles-new contains malicious code that silently subscribes a victim's authenticated WhatsApp account to attacker-controlled channels without consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query upon connection. The targeted WhatsApp channel IDs are obfuscated or dynamically fetched, allowing attackers to modify targets after installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @mivesensei/baileys version 0.4.2 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing authenticated FOLLOW queries using the victim's session. The targeted channel IDs are obfuscated or dynamically fetched to avoid detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @mikudeveloper/grace versions 2.0.1, 1.0.21, and 1.0.20 contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This malicious behavior leverages the victim's authenticated WhatsApp session. The injected code does not steal credentials, maintain persistence, or execute arbitrary remote code, but it enables stealthy and flexible subscription to hidden or dynamically fetched channels.
The @kanaraa/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query using the installer's WhatsApp session. The targeted channels are obfuscated or dynamically fetched, allowing attackers to modify targets after installation. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code.
The npm package @jojoxyz/condemnedforce-baileys version 2.3.0 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. The targeted channels are obfuscated or dynamically fetched to avoid detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @ikanngeming/ikannbail versions 1.0.2 through 1.0.7 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This malicious behavior leverages the installer's authenticated WhatsApp session to issue covert subscription requests. The targeted channels are obfuscated or dynamically fetched. The code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The npm package @coopeuch/core version 1.999.999 contains malicious code that executes automatically upon installation. This code collects extensive host and environment information, including system identifiers, network details, and private project metadata, and sends this data to an external server without user consent. The package uses a dependency confusion technique by adopting a high version number to override internal scoped packages. This behavior constitutes unauthorized data exfiltration during package installation.
The npm package @s4yhiitestpoc/r2-https version 1.0.0 contains malicious code in its postinstall script that collects detailed host environment data and sends it to a hardcoded external server without user consent. This includes sensitive information such as hostname, username, home directory, platform details, network interfaces, and npm configuration values that may reveal internal registry URLs. The script also performs an out-of-band DNS lookup to confirm execution, enabling covert data exfiltration during package installation.