Vulnerability MAL-2026-19006
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
14 days ago
October 27, 2026 at 12:00 AM UTC
Malicious code in reyz-baileys (npm)
1.0.2 - 1.0.5
1.0.2 - 1.0.5
Summary
Malicious code in reyz-baileys (npm)
Details
reyz-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in index.js sends the WhatsApp w:mex FOLLOW query for the channel ID(s) 120363405947742419@newsletter, 120363421096003443@newsletter, using the victim's authenticated session and without telling them. Same behaviour as the PhantomSub family (MAL-2026-17342).
References
Impacted packages
Timeline
Published
14 days ago
October 27, 2026 at 12:00 AM UTC
Last Modified
4 hours ago
November 09, 2026 at 11:15 PM UTC