The alipclutch-baileys npm package, a fork of the Baileys WhatsApp library, contains malicious code that covertly exfiltrates message data to a third-party host. The malicious code obfuscates the destination URL and sends network requests to https://fiora.nixel.my.id/ during message sending. Multiple specific versions of the package are affected, enabling unauthorized data leakage through the installer's authenticated session.