xzvbailsx

GHSA-m364-pjc8-42wc

Malicious code in xzvbailsx (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.0`

## Source: amazon-inspector (ac9176da252791a96b93c24e702c2245fb96d9655cdf9f31d61e9bc3e0c21528)
package.json declares the dependency `libsignal` with source `github:tenka-san/libsignal-node`, an unpinned GitHub ref with no commit SHA, tag, or integrity hash. On `npm install`, npm fetches whatever HEAD of that repository currently points at and executes any lifecycle scripts (preinstall/install/postinstall) it contains on the installer's machine. The referenced GitHub account is a personal repository unrelated to the WhiskeySockets/Baileys upstream that this package forks. Provenance is further obscured by an identity mismatch: the package is published as `xzvbailsx` but README/examples describe it as `@XzV-RxVz/xbails`, and the `repository` field points to Telegram handles (`t.me/JustRxVz`, `t.me/XzV_ExpzC`) rather than a source repository.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/ea10930d581ebcec46b61de86d2056d5f3555444/osv/malicious/npm/xzvbailsx/MAL-2026-16279.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/ea10930d581ebcec46b61de86d2056d5f3555444/osv/malicious/npm/xzvbailsx/MAL-2026-16279.json
- https://www.npmjs.com/package/xzvbailsx/v/1.0.0
- https://github.com/advisories/GHSA-m364-pjc8-42wc

Compromised versions (1)

= 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.