libsignal

概要 libsignal には、公式の Signal クライアントおよびサーバーで使用されるプラットフォーム非依存の API が含まれており、Java、Swift、または TypeScript ライブラリとして公開されています。基盤となる実装は Rust で書かれています: libsignal-protocol: Double Ratchet アルゴリズムを含む Signal プロトコルを実装しています。libsignal-protocol-java および libsignal-metadata-java の代替です。 signal-crypto: AES-GCM...

Malicious code in @blurrydespair/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...

MAL-2026-14404 Malicious code in @blurrydespair/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...

Astra Linux – Vulnerability in protobuf-c, libsignal-protocol-c

Protobuf-c before version 1.4.1 has an unsigned integer overflow in the parserequiredmember field...

@lynnidoffc/baileys (>=3.1.0, <=3.1.7) potentially affected by unknown CVE via @hanssoft/libsignal-node (0.0.1-security)

@hanssoft/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @hanssoft/libsignal-node and may be impacted: - @lynnidoffc/baileys =3.1.0, =3.1.7 Source cves: unknown CVE Source advisory:...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-DREAMGUYXEONLIBSIGNALNODE-18748591...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13931...

shadowmd (8.6.87), shadowmd-baileys (>=8.6.49, <=8.6.57) potentially affected by unknown CVE via @shadowmd/libsignal-node (8.6.59)

@shadowmd/libsignal-node NPM version 8.6.59 is affected by a known vulnerability. The following packages have a transitive dependency on @shadowmd/libsignal-node and may be impacted: - shadowmd 8.6.87 - shadowmd-baileys =8.6.49, =8.6.57 Source cves: unknown CVE Source advisory:...

@exclipz/baileys (10.0.1), @exclipz/bails (>=2.0.3, <=2.0.7) +1 more potentially affected by unknown CVE via @shinzepelly/libsignal-node (2.2.4)

@shinzepelly/libsignal-node NPM version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on @shinzepelly/libsignal-node and may be impacted: - @exclipz/baileys 10.0.1 - @exclipz/bails =2.0.3, =2.0.7 - @shinzepelly/baileys 1.0.8 Source cves: unknown C...

Malicious code in @vinnxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b886dd14e44e2d8c35f297283b6bf7eb3cc0e947d786130c5fd8976d7ebdc1 Analysis of this package version surfaced no a static rule matches and no traced install-time or import-time behaviors indicating credential theft,...

MAL-2026-11079 Malicious code in @vinnxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b886dd14e44e2d8c35f297283b6bf7eb3cc0e947d786130c5fd8976d7ebdc1 Analysis of this package version surfaced no a static rule matches and no traced install-time or import-time behaviors indicating credential theft,...

Malicious code in @sauruslord/libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2cf2672d98396a7b66cb732741d269732f5faae72293ea46e06b879e7a45b Package name impersonates Open Whisper Systems' libsignal-node but ships unrelated code. On require of index.js, after a 1-second delay, install.js...

MAL-2026-10659 Malicious code in @sauruslord/libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2cf2672d98396a7b66cb732741d269732f5faae72293ea46e06b879e7a45b Package name impersonates Open Whisper Systems' libsignal-node but ships unrelated code. On require of index.js, after a 1-second delay, install.js...

MAL-2026-4473 Malicious code in @zizie071/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6d5096096e7e958916c5449a7480949135e6af5cd9acd4e1b1edab8c331163 On require, index.js schedules install.js which locates the installer's @whiskeysockets/baileys package on disk and overwrites lib/Socket/newsletter....

MAL-2026-4442 Malicious code in @shadowmd/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bcabb5263ecf1f1259bd5969a921866dbb808da4fda7b9d7708baeb60c21e6 Package name and description impersonate the Open Whisper Systems libsignal-node library. On require, index.js schedules install.js, which locates an...

Malicious code in @shadowmd/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bcabb5263ecf1f1259bd5969a921866dbb808da4fda7b9d7708baeb60c21e6 Package name and description impersonate the Open Whisper Systems libsignal-node library. On require, index.js schedules install.js, which locates an...

Malicious code in @hanssoft/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fa3a06df50a8c53c5eb05ac4d1214e6fa1edfb18d03c8484fa2014190659a Package name impersonates the well-known libsignal-node Signal Protocol library and ships a verbatim copy of its README, but the code is unrelated. O...

MAL-2026-4393 Malicious code in @hanssoft/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fa3a06df50a8c53c5eb05ac4d1214e6fa1edfb18d03c8484fa2014190659a Package name impersonates the well-known libsignal-node Signal Protocol library and ships a verbatim copy of its README, but the code is unrelated. O...

Malicious code in @budetzz/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dbcccc761971dfc5f844f59f362fe32ee1e0b9a3cd91ddd4fc87be5c8b013a The package is published under the name @budetzz/libsignal-node, impersonating the well-known libsignal Signal-protocol library, but the homepage and...