MSC-2026-6457

Malicious libsignal-node impersonator packages published to npm as part of the Baileys WhatsApp channel-farming campaign. The packages ship an import-time patcher that hooks the installer's authenticated WhatsApp session and forces silent follows of attacker-controlled WhatsApp channels. 15 packa...