@dreamguyxeon/libsignal-node is a malicious npm package that performs supply-chain tampering by overwriting a dependency's source code to inject remote-controlled code. Upon import, it patches the @whiskeysockets/baileys library to silently make the host's authenticated WhatsApp session auto-follow attacker-chosen channels. The injected code fetches a mutable JSON from a personal GitHub repository, allowing the attacker to arbitrarily control newsletter operations on compromised systems. The package forcibly terminates the host process shortly after installation, and the tampering is persistent and idempotent. Systems with this package installed should be considered fully compromised.