The npm package yonzofficial (versions 2.1.0 through 2.1.3) is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing authenticated FOLLOW queries using the victim's own WhatsApp session. The targeted channel IDs are obfuscated or dynamically fetched to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @chatbridgeworld/baileys contains malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but due to the severity of the compromise, complete remediation may require rotating all secrets and keys from a separate, secure machine.
The gpa-core npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee full remediation due to potential persistent malicious software.
The @velliajs/telegram npm package contains malicious code that compromises any computer on which it is installed or running. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets and keys from a different, uncompromised computer is strongly advised.
The npm package 'zhg.sql' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone may not fully remediate the infection, as the attacker may have established persistent control over the system.
The npm package winks.tunnelsql contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package '@gqb333/based' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee the removal of all malicious software or backdoors introduced by this package.
The npm package '@gqb333/baileys' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have gained full control of the system.
The npm package '@massnerder/x402-scraper-mcp' version 1.0.0 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior classifies the package as malware within the software supply chain.
The npm package @hello.nrfcloud.com/proto-map versions 18.0.0 and 18.1.0 contain malicious code. Any computer with this package installed or running is considered fully compromised, with potential unauthorized control by an outside entity. Immediate rotation of all secrets and keys stored on the affected computer is recommended. Removing the package alone may not fully eliminate the malicious presence.
The logger-libs package on PyPI contains malicious code in versions 0.4.1, 0.4.2, 0.4.3, 0.4.5, and 0.4.6. The malware is obfuscated and spreads its payload across multiple files, reconstructing it at runtime. It downloads and executes remote malicious scripts and includes code to execute remote commands on the victim's machine, likely limited to specific commands.
The u-chan-secrets npm package version 5.2.1 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by it, as full control of the system may have been given to an attacker.
The seolibs-package on npm contains malicious code that fully compromises any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of control potentially granted to attackers, complete remediation cannot be guaranteed by removal alone.
The npm package @ethersphere/bee-js version 13.3.0 contains malicious code. Any system with this package installed or running is considered fully compromised, with potential unauthorized access to all secrets and keys stored on the machine. Immediate removal of the package and rotation of all secrets from a different, uncompromised device is strongly advised. However, removal of the package alone may not eliminate all malicious software introduced by the compromise.
The PyPI package 'extrahtml' versions 0.1.0, 0.1.1, and 0.1.2 include a malicious dependency that masquerades as a YAML loader but executes remote code from a provided file. This campaign, identified as 2026-11-parseyaml, involves intentionally embedded malicious code that downloads and runs a remote malicious script. The analyzed code was a stub, indicating potential for further malicious payloads.
The parseyaml package on PyPI version 1.2.0 contains malicious code embedded in a dependency that masquerades as a YAML loader. This malicious loader executes remote code by downloading and running a remote malicious script. The campaign associated with this threat is identified as 2026-11-parseyaml and is categorized as malware with clear malicious intent.
The bundyfed package on PyPI versions 1.0.0 and 1.0.1 contains malicious code that downloads and executes an infostealer during installation. This is achieved by overriding the install command in setup.py to run the malicious payload.
The PyPI package lookuptest11 version 0.0.1 contains malicious code that exfiltrates basic host information such as IP address and username during installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It appears to be a low-harm risk package resembling typical pentest or testing tools but with unauthorized data exfiltration functionality.
The PyPI package 'super-color' versions 0.1.0 through 0.1.3 contains malicious code that downloads and installs an infostealer. This malware hides its malicious actions within the library usage, executing a remote executable to steal information.
The supercolor-tui package on PyPI contains malicious code that downloads and installs an infostealer. This malware executes a remote executable to steal information, hiding its actions within library usage. Multiple versions of the package are affected.