The npm package kiyoramarkets version 8.0.16 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The target channel identifiers are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @ikyyjee/ikkysingle version 0.1.2 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The malicious code uses obfuscation techniques to hide the target channel identifiers and may fetch updated target lists at runtime. This behavior abuses the installer's authenticated WhatsApp session but does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The npm package @ikyyjee/ikyysinggle version 1.7.7 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched to evade detection. This malicious behavior abuses the installer's WhatsApp session to increase subscribers for attacker channels but does not steal credentials or execute arbitrary code.
The npm package @ikyyjee/ikyysingle version 1.7.8 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, and the malicious code uses the victim's own WhatsApp session to issue subscription requests. This behavior does not involve credential theft, persistence, or arbitrary code execution.
The npm package @kxa/xbails version 0.0.5 is a malicious fork of the Baileys WhatsApp Web library that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. It achieves this by injecting code that issues an authenticated FOLLOW query using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. This behavior does not involve credential theft, persistence, or arbitrary code execution.
The @badzz88/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code. The targeted channel IDs are obfuscated or fetched remotely, allowing attackers to change targets after installation.
The dzyhaxz-baileys npm package is a malicious fork of the Baileys WhatsApp library that automatically causes WhatsApp-authenticated users to follow a hardcoded channel without their consent. It also aliases critical cryptographic dependencies to author-controlled packages with mutable version tags, enabling supply-chain manipulation. This behavior violates the package's own documentation and poses a deceptive supply-chain risk. Although it does not steal credentials or enable remote code execution directly, any system with this package installed should be considered fully compromised.
The npm package yonzoffic-baileys version 8.6.90 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. The malicious code uses the installer's authenticated WhatsApp session to issue a covert FOLLOW query to subscribe to hidden WhatsApp Channel/Newsletter JIDs. The target JIDs are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. This behavior does not steal credentials, establish persistence, or execute arbitrary code.
The npm package @bellaxchuu/crystalred version 0.1.2 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing authenticated FOLLOW queries using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @xatancchii/velycxbail version 1.1.0 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The targeted channel IDs are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code abuses the installer's own WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary code.
The saturn-baileys npm package (version 1.0.0) is a malicious fork of the Baileys WhatsApp Web library that injects covert subscription actions into the WhatsApp socket layer. Upon connection, it silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing authenticated FOLLOW queries. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code abuses the installer's authenticated session but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package shadowmd version 8.6.87 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, and the malicious action abuses the installer's WhatsApp session to gain subscribers. The code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The virgil-cli npm package version 0.1.4 contains malicious behavior where it sends the entire conversation history, including potentially sensitive shell and file outputs, to a remote server without user consent. This occurs even in local mode, which is advertised as private. The package uses a hardcoded static token for authentication and allows remote command execution via a control server, which can be abused by attackers with network access. This behavior contradicts the privacy claims and poses a significant security risk.
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Malicious script payloads placed in the title attribute of an anchor tag survive WordPress's comment kses filter at save time, as the payload is only promoted to executable HTML attributes when the plugin's page-wide regex strips the closing quote delimiter at render time; exploitability is therefore subject to the standard comment moderation workflow before the comment is publicly displayed.
A vulnerability in Hugging Face Transformers versions 4.49.0 through 5.8.1 allows remote Python files to be written to local disk without user consent when using the GenerativePreTrainedModel.load_custom_generate() function. The function caches a remote module file before performing the trust check, causing attacker-controlled code to be saved persistently even if the user declines to trust it. Execution of this code is blocked by the trust prompt, but the unauthorized files remain on disk and may cause stale cache collisions in future trusted model loads.
The @hanzofc/baileys npm package versions 7.0.0 and 7.0.1 contain malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting a covert follow query into the WhatsApp socket connection, leveraging the installer's authenticated session. The targeted channel IDs are obfuscated or dynamically fetched, making detection difficult. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The @japofc/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The targeted channel IDs are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @lendkzn/xntaabail version 7.0.0 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or fetched dynamically, and the malicious action uses the installer's own WhatsApp session to perform the subscription. This behavior does not involve credential theft, persistence, or arbitrary code execution.
The npm package @noxleyss/baileys version 1.1.10 is part of a family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The subscription targets are obfuscated or dynamically fetched, making detection difficult. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @nyzzpedia/baileys-new version 1.0.0 is a malicious fork of the Baileys WhatsApp Web library. It injects code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing an authenticated FOLLOW query using the victim's own session. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. This behavior does not steal credentials, maintain persistence, or execute arbitrary code.