Malicious code in @sanzoffc/baileys (npm)

Source: amazon-inspector 4393cd98419ed1fce683c0fde038bce830873769d85d69e64674df61f68502bc This package is a fork of the Baileys WhatsApp library that adds covert remote-controlled behavior driven by the installer's authenticated WhatsApp session. In lib/Socket/socket.js, socketConnect invoked fro...

Malicious code in @fyxzpediaa/baileys (npm)

Source: amazon-inspector 0747ec3c1ce519798cac2e89f8ec1e1532d428355a13929f0176a11d77a2b175 This fork of Baileys injects a covert remote-directed action into the WhatsApp socket. On every WebSocket connection, socketConnect reconstructs a URL from a char-code array decoding to...