The npm package @sakataoffc/baileys is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels. This subscription leverages the victim's authenticated session and uses obfuscated or dynamically fetched target channels to evade detection. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.