Malicious code in @rixxcodex/baileys (npm)

Source: amazon-inspector 58b5247e2f10d09b51e8d59c4b36cb2cbe62909af4be588fdb07dabf0afabcf2 This package is a fork of the Baileys WhatsApp library that adds three undocumented channels which use the installer's authenticated WhatsApp session to perform account actions chosen by the author at runtim...

Malicious code in @sanzoffc/baileys (npm)

Source: amazon-inspector 4393cd98419ed1fce683c0fde038bce830873769d85d69e64674df61f68502bc This package is a fork of the Baileys WhatsApp library that adds covert remote-controlled behavior driven by the installer's authenticated WhatsApp session. In lib/Socket/socket.js, socketConnect invoked fro...

Malicious code in @fyxzpediaa/baileys (npm)

Source: amazon-inspector 0747ec3c1ce519798cac2e89f8ec1e1532d428355a13929f0176a11d77a2b175 This fork of Baileys injects a covert remote-directed action into the WhatsApp socket. On every WebSocket connection, socketConnect reconstructs a URL from a char-code array decoding to...