MAL-2026-17837 Malicious code in @sanzoffc/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2838d53888242c50e19ce80fc949f25a34de59a1282fc3631abf64a671e7afe9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@sanz-0fx/baileys-mod (1.0.3-beta), @sanzsayangvien/baileys-pro (2.0.4) +1 more potentially affected by unknown CVE via @sanzoffc/libsignal-node (0.0.1-security)

@sanzoffc/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @sanzoffc/libsignal-node and may be impacted: - @sanz-0fx/baileys-mod 1.0.3-beta - @sanzsayangvien/baileys-pro 2.0.4 - @sanzstore/baileys-pro =1.0.0,...

Malware in @sanzoffc/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@sanz-0fx/baileys-mod (1.0.3-beta), @sanzsayangvien/baileys-pro (2.0.4) +1 more potentially affected by unknown CVE via @sanzoffc/libsignal-node (0.0.1-security)

@sanzoffc/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @sanzoffc/libsignal-node and may be impacted: - @sanz-0fx/baileys-mod 1.0.3-beta - @sanzsayangvien/baileys-pro 2.0.4 - @sanzstore/baileys-pro =1.0.0,...

MAL-2026-17836 Malicious code in @saazkira/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02ddff50116449dec10c106e58ae0c84f16919145b8e13ddea1a23b0f00e9c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @saazkira/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17818 Malicious code in @alipclutch/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a547c784c13d1a96d07b03039a8997721e06467bda6794a2a1cc14a2cb68ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

Malware in @alipclutch/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17814 Malicious code in @mikudeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4749ec89d8c51729fbd97994a6a035ab229a56bb1094c4c47d9a3d68df050711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @mikudeveloper/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

@sanz-0fx/baileys-mod (1.0.3-beta), @sanzsayangvien/baileys-pro (2.0.4) +1 more potentially affected by unknown CVE via @sanzoffc/libsignal-node (0.0.1-security)

@sanzoffc/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @sanzoffc/libsignal-node and may be impacted: - @sanz-0fx/baileys-mod 1.0.3-beta - @sanzsayangvien/baileys-pro 2.0.4 - @sanzstore/baileys-pro =1.0.0,...

MAL-2026-17676 Malicious code in @bellaxchuu/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f70788aeca5b98fbe0c721d7f6a88c036d661c3f0132443a6bdb97080f5819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@corexium/xbails (0.0.7), @synergyxd/baileys (0.0.3) potentially affected by unknown CVE via @bellaxchuu/libsignal-node (0.0.1-security)

@bellaxchuu/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @bellaxchuu/libsignal-node and may be impacted: - @corexium/xbails 0.0.7 - @synergyxd/baileys 0.0.3 Source cves: unknown CVE Source advisory:...

@corexium/xbails (0.0.7), @synergyxd/baileys (0.0.3) potentially affected by unknown CVE via @bellaxchuu/libsignal-node (0.0.1-security)

@bellaxchuu/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @bellaxchuu/libsignal-node and may be impacted: - @corexium/xbails 0.0.7 - @synergyxd/baileys 0.0.3 Source cves: unknown CVE Source advisory:...

MAL-2026-17672 Malicious code in @xayz/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9744aa6c5f3c994e66b4847aba63d6cf1503583f0a23185c67bb32b7394e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@corexium/xbails (0.0.7), @synergyxd/baileys (0.0.3) potentially affected by unknown CVE via @bellaxchuu/libsignal-node (0.0.1-security)

@bellaxchuu/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @bellaxchuu/libsignal-node and may be impacted: - @corexium/xbails 0.0.7 - @synergyxd/baileys 0.0.3 Source cves: unknown CVE Source advisory:...

Malicious Package

Overview @bellaxchuu/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...