The npm package @ostyado/baileys versions 2.0.6 through 2.0.9 contains malicious code that silently subscribes the user's authenticated WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting a covert FOLLOW query into the WhatsApp socket connection, using the victim's own session. The targeted channels are obfuscated or dynamically fetched, making detection difficult. The malicious code does not steal credentials, establish persistence, or execute arbitrary code.