Malware in zero-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview zero-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in zero-baileys (npm)

Source: amazon-inspector 58d472a4390be835fc8ffd5e62a7d3b2bb7270ad6ea651d9cd15bc7abd7735c8 package.json redirects the libsignal dependency to npm:@otaxayun/libsignal-node@latest. The @latest dist-tag is mutable and unpinned, so each npm install of zero-baileys resolves whatever tarball the @otaxay...

MAL-2026-16280 Malicious code in zero-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7a8aa73b2a3a5a61a45cc6f0ebeff58bfb23f8589895065fa30849421f4471 zero-baileys is a fork of the Baileys WhatsApp Web library. Static keyword co-occurrence fired on lib/Utils/messages-media.js where...

Malicious code in zero-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7a8aa73b2a3a5a61a45cc6f0ebeff58bfb23f8589895065fa30849421f4471 zero-baileys is a fork of the Baileys WhatsApp Web library. Static keyword co-occurrence fired on lib/Utils/messages-media.js where...