revinza (1.0.0) potentially affected by unknown CVE via levvleys (2.1.0)

levvleys NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on levvleys and may be impacted: - revinza 1.0.0 Source cves: unknown CVE Source advisory: GHSA-84HG-5759-2CGG...

Malicious code in levvleys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17397 Malicious code in levvleys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

revinza (1.0.0) potentially affected by unknown CVE via levvleys (2.1.0)

levvleys NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on levvleys and may be impacted: - revinza 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17397...

Malware in levvleys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

revinza (1.0.0) potentially affected by unknown CVE via levvleys (2.1.0)

levvleys NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on levvleys and may be impacted: - revinza 1.0.0 Source cves: unknown CVE Source advisory: GHSA-9Q97-JR9X-2QFR...

Malicious code in levvleys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious Package

Overview levvleys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

revinza (1.0.0) potentially affected by unknown CVE via levvleys (2.1.0)

levvleys NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on levvleys and may be impacted: - revinza 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-LEVVLEYS-20336159...