The npm package @fer2809fl/baileys contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, requiring immediate rotation of all secrets and keys from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The cloud-baileys npm package versions 1.0.0 through 1.1.42 contain malicious code. Installing or running this package can lead to full system compromise, potentially exposing all secrets and keys stored on the affected computer. Removal of the package does not guarantee elimination of all malicious software introduced. Immediate secret and key rotation from a separate, uncompromised system is strongly advised.
The arsya-baileys npm package version 9.2.0 and related versions are malicious forks of the Baileys WhatsApp Web library. They inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels by issuing authenticated FOLLOW queries using the victim's own session. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets after installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package '@myorder-frontend-commons/analytics' versions 3.0.0, 10.0.0, and 99.0.0 have been identified as malicious due to communication with a domain linked to malicious activity. This behavior classifies the package as a malicious software component within the supply chain.
The npm package 'kmf-i18n' version 100.100.102 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior classifies the package as a security threat in the software supply chain.
The npm package 'test-account-portal-fe' version 100.100.102 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain known for malicious activity. There is no CVSS score available for this threat. No official patch or remediation guidance is provided in the source data. No known exploits in the wild have been reported. The affected version is exactly 100.100.102.
The npm package 'kmf-bootstrap' versions 100.100.102 and 100.100.103 have been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain linked to malicious activity. No CVSS score is available for this threat.
The npm package 'bungoma' versions 1.0.0, 1.0.1, and 1.1.0 are malicious forks of the Baileys WhatsApp Web library. These versions contain code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, enabling attackers to change subscription targets after installation. The malicious code abuses the installer's authenticated session but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/teambails contains malicious code that silently subscribes a victim's authenticated WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query to obfuscated or dynamically fetched WhatsApp Channel/Newsletter JIDs. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code.
The npm package @tunstock/remact-dom is a typosquatting malicious package impersonating the legitimate react-dom package. It includes a postinstall script that automatically runs during installation, collecting system and project information and exfiltrating it to a suspicious third-party domain. The package falsifies its identity in the data sent to the attacker’s server, indicating a reconnaissance attempt for further supply-chain compromise.
The npm package 'kmf-vendor-pack' version 99.0.0 contains malicious code that executes automatically upon installation. It runs a postinstall script that sends an HTTPS request to an attacker-controlled domain, leaking the installer's OS hostname and username. This behavior confirms unauthorized code execution and data exfiltration without user interaction.
The pxnpm package versions 7.0.0-beta.6, 7.0.0-beta.8, 7.0.0, 7.0.1, and 7.0.2 contain malicious code that silently downloads and executes a native binary from a private host controlled by the author. During installation and every run, pxnpm forcibly replaces all user npm and proxy settings with hardcoded author-controlled registry and proxy URLs, routing all package traffic through an author-operated man-in-the-middle proxy. This allows the author to observe, log, or modify all dependency traffic without user consent or disclosure.
The PyPI package ig-gox version 1.0.0 contains malicious code that executes a concealed payload upon import. This payload is base64-decoded, XOR-decrypted, decompressed, HMAC-verified, and then executed dynamically. The package employs anti-analysis techniques to detect debugging, decompilation, and sandbox environments, exiting if such conditions are detected. It downloads and executes remote malicious scripts designed to abuse Instagram services for mass fake account registration.
The npm package @galicia-toolkit-nestjs/commons contains a malicious native binary that collects sensitive environment variables related to cloud and CI credentials, along with system information, and exfiltrates this data to a hardcoded external server. The package mimics an internal organizational scope to trick users into installing it, and it persists by daemonizing a background process. Multiple published versions are affected, and no source code or build tooling is provided for the native component, making its behavior opaque.
The npm package css-overscroll-contain versions 1.0.0 through 1.0.3 contains malicious code that executes immediately upon module load. This code performs host reconnaissance, steals credentials and sensitive environment variables, probes container escape techniques, and exfiltrates data to a hardcoded attacker endpoint. The package masquerades as a CSS utility but is incompatible with legitimate functionality. Any system with this package installed should be considered fully compromised.
The npm package @kxafunc/xbails version 0.0.8 aliases its libsignal dependency to a non-standard package @bellaxchuu/libsignal-node using the mutable 'latest' dist-tag without version pinning or integrity checks. This allows whoever controls the upstream package @bellaxchuu/libsignal-node to push arbitrary code that executes within the Signal end-to-end encryption cryptographic path, potentially compromising identity keys, prekeys, and plaintext messages.
The npm package 'clickfix_npm_delivery' contains malicious code designed as a social engineering lure. It delivers a fake Cloudflare Turnstile verification page that tricks victims into executing a PowerShell command, which downloads and runs a remote script, granting attackers arbitrary code execution on the victim's Windows machine. Installation of this package compromises the affected computer, potentially exposing all stored secrets and keys.
The npm package @galicia-toolkit/error-master version 999.0.3 contains malicious code that exfiltrates sensitive host and user information via DNS queries during installation. This occurs automatically on npm install without further user interaction. The package appears to be a dependency confusion attack payload designed to override an internal package. Systems with this package installed should be considered fully compromised.
The npm package @galicia-toolkit/tag-manager versions 999.0.3, 999.0.5, and 999.0.6 is a malicious dependency-confusion squat that executes code during installation to exfiltrate sensitive environment variables and host information to an external attacker-controlled server. It collects credential-grade environment variables such as AWS and GitHub tokens, enumerates system details, and sends this data via HTTP and DNS channels. The package contains no legitimate functionality and is designed solely for credential theft. Any system with this package installed should be considered fully compromised, and all secrets must be rotated immediately.
The npm package @galicia-toolkit/spa-build-config versions 999.0.3, 999.0.5, and 999.0.6 contains malicious code in its postinstall script. This script collects sensitive host and credential data, including environment variables with AWS, GitHub, npm, and GitHub Actions tokens, and exfiltrates this information to an external server. The package is likely a dependency confusion attack targeting internal scopes. Systems with this package installed should be considered fully compromised, and all secrets should be rotated immediately.