@zaxius/baileys is a malicious fork of the Baileys WhatsApp Web library that silently subscribes the installer's WhatsApp account to channels chosen by the publisher without user consent. It fetches a mutable list of channel IDs from a remote repository and uses the victim's authenticated session to follow those channels. Additionally, it depends on a runtime library pulled directly from a GitHub repository without integrity checks, allowing arbitrary code execution during installation.