@dyyxyzz/baileys-mod (>=6.0.32, <=6.0.54) potentially affected by unknown CVE via @daffadeveloper/libsignal-node (0.0.1-security)

@daffadeveloper/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @daffadeveloper/libsignal-node and may be impacted: - @dyyxyzz/baileys-mod =6.0.32, =6.0.54 Source cves: unknown CVE Source advisory:...

MAL-2026-1118 Malicious code in @daffadeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c4d6e1233759183f848159d1b47ee443d914e4ce13251df4518a1a5becdbc6 The package @daffadeveloper/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malware in @daffadeveloper/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...