The zero-baileys npm package, a fork of the Baileys WhatsApp Web library, has been identified as malicious. Although static analysis shows typical usage of child_process and HTTPS requests consistent with media handling functionality, no direct evidence of exfiltration or credential theft was found. However, the package is considered fully compromising to any system where it is installed or running, with recommendations to rotate all secrets and keys from a separate machine and remove the package. There is no guarantee that removal will eliminate all malicious artifacts due to potential full system compromise.