Malicious code in @zhengliyoux/baileys (npm)

Malicious package. @zhengliyoux/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. it silently subscribes every victim via the injected WhatsApp newsletter/channel FOLLOW on connect to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs:...

Malicious code in hiura-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebb60061f29d4f4279bca1129ebfccefb928bd22364f26961205935ff71393f This is a fork of the Baileys WhatsApp library that adds undocumented behavior abusing the consumer's authenticated WhatsApp account for the author's...