@lekzo/baileys

GHSA-75mc-fj4c-6pfm

Malicious code in @lekzo/baileys (npm)

Details

**Severity:** Critical

**Affected versions:** `= 0.0.1`

## Source: amazon-inspector (2cd9141ef0d6d97338c5f976c8071a6f5c37010683b27d4463b2221d76b82304)
package.json declares the `libsignal` dependency as `github:canove/libsignal-node` with no tag, branch, or commit SHA. On `npm install`, npm fetches whatever the default branch HEAD of that repository currently points to and runs any lifecycle scripts inside the fetched tree, with no version resolution against the npm registry and no integrity check. The bytes that execute on the installer's machine are entirely controlled by whoever holds write access to that GitHub repo at install time and can change silently between installs.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/27f7162c0a51d4a01ac473c75f1a5e1fb98bd511/osv/malicious/npm/@lekzo/baileys/MAL-2026-16276.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/27f7162c0a51d4a01ac473c75f1a5e1fb98bd511/osv/malicious/npm/@lekzo/baileys/MAL-2026-16276.json
- https://www.npmjs.com/package/@lekzo/baileys/v/0.0.1
- https://github.com/ossf/malicious-packages/blob/8e7f15566f850ea5445f89d95771f9e4d9a10b24/osv/malicious/npm/@lekzo/baileys/MAL-2026-16276.json
- https://www.npmjs.com/package/@lekzo/baileys/v/0.0.7
- https://github.com/advisories/GHSA-75mc-fj4c-6pfm

Compromised versions (1)

= 0.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.