@goldenqueen/bai (>=1.0.0 <=1.0.3), @khineeyouu/baileys (>=0.2.1 <=0.2.24) +10 more potentially affected by unknown CVE via @yaoii-bails/libsignall-node (=0.0.1-security)

@yaoii-bails/libsignall-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @yaoii-bails/libsignall-node and may be impacted: - @goldenqueen/bai =1.0.0, =0.2.1, =2.0.16, =17.1.12, =1.0.13, =1.0.23, =1.0.24 - nopedorex =1.0....

@goldenqueen/bai (>=1.0.0 <=1.0.3), @khineeyouu/baileys (>=0.2.1 <=0.2.24) +10 more potentially affected by unknown CVE via @yaoii-bails/libsignall-node (=0.0.1-security)

@yaoii-bails/libsignall-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @yaoii-bails/libsignall-node and may be impacted: - @goldenqueen/bai =1.0.0, =0.2.1, =2.0.16, =17.1.12, =1.0.13, =1.0.23, =1.0.24 - nopedorex =1.0....

Malicious Package

Overview @yaoii-bails/libsignall-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-1125 Malicious code in @yaoii-bails/libsignall-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e3f8a6510eddfe59ab8b6e22c62731e2563f000fd76db05ad293e27d14eed6 The package @yaoii-bails/libsignall-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in @yaoii-bails/libsignall-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e3f8a6510eddfe59ab8b6e22c62731e2563f000fd76db05ad293e27d14eed6 The package @yaoii-bails/libsignall-node was found to contain malicious code. Source: ghsa-malware...