The nested-lib npm package versions 1.0.0, 1.0.1, and 1.1.0 contain malicious code that sends system information to an unauthorized external server without user consent. The package executes a beacon script both during installation and when required, transmitting hostname, directory paths, and Node.js version over unencrypted HTTP to a hardcoded IP address. The package itself provides no real functionality, acting as a reconnaissance beacon likely used to confirm successful installation before further malicious activity.
The npm package 'cloudflare_module' version 99.0.1 is a malicious dependency-confusion lure that exfiltrates host information without user consent. It executes a beacon script during installation and when required, sending system details to a hardcoded IP address over unencrypted HTTP. The package uses a Proxy to avoid errors during bundling, disguising its malicious behavior. It is not an official Cloudflare package and targets any system resolving its name.
The nitro-cjs-requirer npm package contains malicious code that acts as a beacon to send host and environment information to a hardcoded IP address over plain HTTP. It executes this data transmission both during installation and when the module is required, without user consent or documentation. The module itself exports a proxy that returns no-op functions, making it appear benign while performing reconnaissance on the host system.
The @coopeuch/config npm package version 1.999.999 contains malicious code that executes automatically upon installation. It collects detailed host and environment information, including host identity, network interfaces, container detection, and project metadata, then sends this data to a hardcoded external server without user consent. This behavior exposes internal infrastructure details and private project identifiers to an unauthorized third party.
The npm package 'react-dropzone-v4' version 99.0.0 is a malicious package that mimics the popular 'react-dropzone' library. It contains a preinstall script that executes automatically during installation, which performs DNS and HTTP requests to a third-party domain, transmitting the installer's hostname without consent. The package provides no legitimate functionality and appears designed for dependency confusion attacks to capture host information.
The npm package 'bungoma' versions 1.0.0, 1.0.1, and 1.1.0 are malicious forks of the Baileys WhatsApp Web library. These versions contain code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, enabling attackers to change subscription targets after installation. The malicious code abuses the installer's authenticated session but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/teambails contains malicious code that silently subscribes a victim's authenticated WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query to obfuscated or dynamically fetched WhatsApp Channel/Newsletter JIDs. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code.
The pxnpm package versions 7.0.0-beta.6, 7.0.0-beta.8, 7.0.0, 7.0.1, and 7.0.2 contain malicious code that silently downloads and executes a native binary from a private host controlled by the author. During installation and every run, pxnpm forcibly replaces all user npm and proxy settings with hardcoded author-controlled registry and proxy URLs, routing all package traffic through an author-operated man-in-the-middle proxy. This allows the author to observe, log, or modify all dependency traffic without user consent or disclosure.
The npm package @bellaxchuu/familyxtrx version 0.1.5 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code abuses the installer's authenticated session but does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @bellaxchuu/flowblue version 1.5.7 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, enabling attackers to change targets post-installation. The malicious code abuses the installer's WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @bellaxchuu/privatebails version 1.4.1 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched to evade detection. This behavior abuses the victim's own WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/skyblue version 2.1.2 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The targeted channel identifiers are obfuscated or dynamically fetched at runtime to evade detection. The malicious code abuses the installer's own WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/velvetry versions 0.1.3 and 0.1.4 contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert subscription action into the WhatsApp socket layer, leveraging the installer's authenticated WhatsApp session. The targeted channel IDs are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The @xayz/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The target channels are obfuscated using various techniques and may be dynamically fetched from attacker-controlled sources. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The my-baileys npm package versions 1.0.1 through 1.0.5 contain malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing authenticated FOLLOW queries using the installer's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The npm package albert-anitabaileys version 1.1.13 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. This behavior does not involve credential theft, persistence, or arbitrary code execution.
The cantarella-baileys npm package, versions 1.1.11 through 1.1.13, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The targeted channels are obfuscated or fetched dynamically to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @nyzzpediaa/baileys-new contains malicious code that silently subscribes the installer's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The targeted channel IDs are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/belbails version 1.0.1 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels. This subscription uses the victim's authenticated WhatsApp session without their consent. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The @lendxntaa/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This action is performed by injecting a covert subscription into the WhatsApp socket layer using the victim's authenticated session. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code. The targeted channels are obfuscated or dynamically fetched to avoid detection.