Malicious code in @ubedsockets/baileys (npm)

Malicious package. @ubedsockets/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. On connection it issues an authenticated w:mex newsletter FOLLOW mutation queryid 7871414976211147 that silently subscribes every victim to attacker-controlled WhatsApp channels —...