The npm package '@zanxiky/baileys' is a trojanized fork of the legitimate Baileys WhatsApp library. It contains malicious code that automatically subscribes users to attacker-controlled WhatsApp newsletter channels upon connection. The package also depends on a non-registry GitHub repository controlled by an unaffiliated account, enabling arbitrary code execution during installation. All published versions of this package are malicious.