@mikudeveloper/baileys

GHSA-vw8h-q4hc-x8cv

Malicious code in @mikudeveloper/baileys (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.0`

## Source: amazon-inspector (d03bf7166a5353a0b22409ebbb724ee53f24394c9ff340df668c970772796e28)
This package is a fork of Baileys that declares `libsignal` in `package.json` as `github:tenka-san/libsignal-node` — a git dependency with no commit SHA, tag, or integrity check, resolving to whatever HEAD returns at install time and executing any lifecycle scripts inside it. The referenced GitHub account is unrelated to the upstream WhiskeySockets/libsignal-node maintainer, so its owner controls install-time code on every installer of this package. Separately, `makeNewsletterSocket` schedules a 120-second `setTimeout` after connection that fetches a channel-ID list from a hardcoded, mutable URL (`raw.githubusercontent.com/MikuDevReal/V2.0/refs/heads/main/pepek.json`) and issues `QueryIds.FOLLOW` on each entry using the installer's authenticated WhatsApp session, silently subscribing them to author-selected channels with no disclosure in the README. The remote list is author-mutable, so follow targets can change at any time.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/403af799bbca20d1c7bc2682a4736256aaf2941c/osv/malicious/npm/@mikudeveloper/baileys/MAL-2026-16386.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/403af799bbca20d1c7bc2682a4736256aaf2941c/osv/malicious/npm/@mikudeveloper/baileys/MAL-2026-16386.json
- https://www.npmjs.com/package/@mikudeveloper/baileys/v/1.0.0
- https://github.com/advisories/GHSA-vw8h-q4hc-x8cv

Compromised versions (1)

= 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.