itsmeeaizat-bailey

GHSA-qj64-qwq4-qcp4

Malicious code in itsmeeaizat-bailey (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.4`

## Source: amazon-inspector (e87b4292727088efa5df8326a5f868b2c6bb3ae66ee15cecc18f2fa899296075)
package.json declares the `libsignal` dependency as `git+https://github.com/whiskeysockets/libsignal-node` with no tag, no commit SHA, and no integrity constraint. On `npm install`, this resolves to whatever the default branch HEAD currently points at and executes any lifecycle scripts inside that fetched tree on the installer's machine — the delivered bytes and their behavior can change at any moment without a version bump to this package. Separately, the default socket factory in this Baileys fork wires an on-connection hook that, roughly 90 seconds after the installer's WhatsApp session opens, silently issues a FOLLOW MEX query for the hardcoded newsletter JID `120363400911374213@newsletter`, which is owned by the package author. The behavior is not documented in the README and is only disableable via an undocumented `autoFollowNewsletterOnConnect:false` option, so the installer's authenticated WhatsApp identity is used to perform a social reach-padding action they did not opt into. No credential theft, exfiltration to an author endpoint, backdoor, or install-time destructive action is present in the shipped code.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/3c782fe975b4fb840fee5d496fb7941edfccfd43/osv/malicious/npm/itsmeeaizat-bailey/MAL-2026-17311.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/3c782fe975b4fb840fee5d496fb7941edfccfd43/osv/malicious/npm/itsmeeaizat-bailey/MAL-2026-17311.json
- https://www.npmjs.com/package/itsmeeaizat-bailey/v/1.0.3
- https://www.npmjs.com/package/itsmeeaizat-bailey/v/1.0.4
- https://www.npmjs.com/package/itsmeeaizat-bailey/v/1.0.5
- https://github.com/ossf/malicious-packages/blob/72394477b395764c28acdd932236d25fca79ced6/osv/malicious/npm/itsmeeaizat-bailey/MAL-2026-17311.json
- https://github.com/advisories/GHSA-qj64-qwq4-qcp4

Compromised versions (1)

= 1.0.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.