The npm package @bellaxchuu/familyxtrx version 0.1.5 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code abuses the installer's authenticated session but does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @bellaxchuu/flowblue version 1.5.7 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched, enabling attackers to change targets post-installation. The malicious code abuses the installer's WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package @bellaxchuu/privatebails version 1.4.1 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The target channels are obfuscated or dynamically fetched to evade detection. This behavior abuses the victim's own WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/skyblue version 2.1.2 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's authenticated WhatsApp account to attacker-controlled channels without user consent. The targeted channel identifiers are obfuscated or dynamically fetched at runtime to evade detection. The malicious code abuses the installer's own WhatsApp session to increase subscribers for attacker channels but does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/velvetry versions 0.1.3 and 0.1.4 contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert subscription action into the WhatsApp socket layer, leveraging the installer's authenticated WhatsApp session. The targeted channel IDs are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @bellaxchuu/xtrxbails (version 0.0.8) is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels using the victim's authenticated session. The targeted channel IDs are obfuscated or dynamically fetched, preventing easy detection. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code.
The @xayz/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The target channels are obfuscated using various techniques and may be dynamically fetched from attacker-controlled sources. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The my-baileys npm package versions 1.0.1 through 1.0.5 contain malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing authenticated FOLLOW queries using the installer's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The npm package @itsmee_aizat.id/baileys2 versions 2.0.0, 2.0.1, and 2.0.2 includes a runtime dependency on a GitHub repository (tenka-san/libsignal-node) controlled by an unrelated user. This dependency is fetched without integrity verification, allowing whoever controls that repository to execute arbitrary code on the installer's machine. The package loads this malicious code at runtime, leading to a full compromise of any computer where it is installed or running.
The npm package albert-anitabaileys version 1.1.13 is part of a large family of malicious forks of the Baileys WhatsApp Web library. These forks inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent by issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. This behavior does not involve credential theft, persistence, or arbitrary code execution.
The cantarella-baileys npm package, versions 1.1.11 through 1.1.13, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert channel-subscription action into the WhatsApp socket layer, issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The targeted channels are obfuscated or fetched dynamically to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package @nyzzpediaa/baileys-new contains malicious code that silently subscribes the installer's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The targeted channel IDs are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package 'dransay' version 99.0.0 contains a malicious preinstall script that performs network requests to a third-party collaborator domain during installation. This behavior leaks the installer's IP address, DNS resolver IP, hostname data, and timestamp to an external server. The package appears to be a dependency-confusion proof-of-concept but executes non-consensual outbound network communication.
The npm package '@dransay/address-validation' version 99.0.0 contains a preinstall script that performs a DNS lookup and HTTPS GET request to a known malicious collaborator domain during installation. This behavior is consistent with a dependency confusion probe designed to reveal the installer's IP address and package name to an external operator. No sensitive environment data or filesystem contents are accessed, and no additional code is fetched or executed. The package is flagged as malicious due to its communication with a domain associated with malicious activity.
The npm package @bellaxchuu/belbails version 1.0.1 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels. This subscription uses the victim's authenticated WhatsApp session without their consent. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The @lendxntaa/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This action is performed by injecting a covert subscription into the WhatsApp socket layer using the victim's authenticated session. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code. The targeted channels are obfuscated or dynamically fetched to avoid detection.
The npm package kiyoramarkets version 8.0.16 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The target channel identifiers are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The npm package css-reading-display-polyfill, version 1.0.0, contains malicious code that executes system commands to collect sensitive host information and environment variables, then exfiltrates this data to a hardcoded external webhook. The package masquerades as a CSS polyfill but instead acts as a dependency confusion probe targeting Wix build infrastructure, potentially leaking CI secrets and cloud credentials.
The npm package 'tensorlake' version 0.5.144 contains malicious code that can fully compromise any computer on which it is installed or running. The compromise may allow an attacker full control, risking exposure of all secrets and keys stored on the affected system. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised.
The npm package tailwindcss-animatecss-keyframes version 1.0.0 contains malicious code or depends on a malicious package. Installation or use of this package can lead to full compromise of the affected computer, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised machine is strongly advised.