Vulnerability MAL-2026-19150
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 days ago
November 06, 2026 at 02:47 PM UTC
Malicious code in @ruthless-imperium/baileys (npm)
0.0.0-stage - 1.0.3
0.0.0-stage - 1.0.3
Summary
Malicious code in @ruthless-imperium/baileys (npm)
Details
Malicious package. @ruthless-imperium/baileys is a trojanized fork of the Baileys WhatsApp library (@whiskeysockets/baileys). it silently subscribes every victim (via the injected WhatsApp newsletter/channel FOLLOW on connect) to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs: 120363399602691477@newsletter, 120363421563597486@newsletter. Legitimate Baileys never hardcodes a channel JID or auto-follows on connect; all published versions are malicious.
References
Impacted packages
Timeline
Published
5 days ago
November 06, 2026 at 02:47 PM UTC
Last Modified
1 hour ago
November 12, 2026 at 05:45 AM UTC