@corexium/xbails

GHSA-w544-4xh4-3m6v

Malicious code in @corexium/xbails (npm)

Details

**Severity:** Critical

**Affected versions:** `= 0.0.7`

## Source: amazon-inspector (7e3ba0508c4009825b9eb3d248094ccbf28b2a2b4dcec420d1aaa533c1594729)
package.json aliases the import name 'libsignal' to the third-party npm package '@bellaxchuu/libsignal-node' pinned only to the mutable '@latest' dist-tag: "libsignal": "npm:@bellaxchuu/libsignal-node@latest". The code imports 'libsignal' at module load time for end-to-end-encryption primitives (SessionCipher, SessionRecord, ProtocolAddress, SessionBuilder in lib/Signal/libsignal.js and lib/Signal/curve.js). Each install resolves whatever the owner of @bellaxchuu/libsignal-node has published to @latest, with no version pin, no integrity check, and no provenance tie to the upstream libsignal-node project. The maintainer of the aliased fork therefore controls arbitrary code that runs at require/import time of this package, including inside the cryptographic session-handling path.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/a01e9577ea2c3f07b32377e4fafdd9eda85e7c9c/osv/malicious/npm/@corexium/xbails/MAL-2026-18491.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/a01e9577ea2c3f07b32377e4fafdd9eda85e7c9c/osv/malicious/npm/@corexium/xbails/MAL-2026-18491.json
- https://www.npmjs.com/package/@corexium/xbails/v/0.0.7
- https://github.com/advisories/GHSA-w544-4xh4-3m6v

Compromised versions (1)

= 0.0.7

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.