Threats Tagged 'mal-2026-17446'
View all threats tagged with 'mal-2026-17446'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-17446'
Click on any threat for detailed analysis and mitigation recommendations
The luoxy-baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that automatically subscribes the user's authenticated WhatsApp account to certain WhatsApp Channels (newsletters) chosen by the publisher. This auto-subscription occurs without explicit user consent, triggered 90 seconds after a WhatsApp connection is established. The list of channels to follow is partially hardcoded and partially fetched at runtime from a publisher-controlled GitHub URL, allowing dynamic modification of subscribed channels. The package does not exfiltrate credentials or install persistent backdoors, but it covertly inflates the publisher's channel subscriber counts. This behavior is enabled by default and undocumented except for a comparison table in the README. A user can opt out by setting a configuration flag to false. Join the discussion | GCVE Database | 10/11/2026, 16:54:06 UTC Added: 10/11/2026, 21:33:01 UTC |
Showing 1 to 1 of 1 result