Malicious code in @sahril2nd/baileys (npm)

Source: amazon-inspector a3d2089d9678322dc8adbf5e6e740c29d6720133df3489970652a2100641435e This package is a fork of the Baileys WhatsApp library that embeds a hardcoded network destination hidden as a String.fromCharCode... decimal-ASCII array inside lib/Socket/messages-send.js. The decoded bytes...

Malicious code in diezyclutch-baileys (npm)

Source: amazon-inspector b034105b4e65e2ff38eef557d7b480758070d1122aa6338a6873a9ee76f9111a diezyclutch-baileys is a fork of the Baileys WhatsApp library. In lib/Socket/messages-send.js the code constructs a network destination from a String.fromCharCode... array that decodes to...

Malicious code in santana-baileys (npm)

Source: amazon-inspector a01fc218f60217e160355fc41c6006c25da2197ea1fec2b3402df38e125e4252 santana-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js line 425 and again at line 436 reconstructs a destination URL from a decimal char-code array via...

Malicious code in jagproject (npm)

Source: amazon-inspector 0d8c56a51a256d7e55c64c71b51b0559ca53c6624e2b225264b13a5061105947 The package a Baileys-family WhatsApp library fork contains char-code-obfuscated destination strings in lib/Socket/messages-send.js at lines 425 and 436. The byte arrays passed to String.fromCharCode decode ...