@bellaxchan/techxatz@0.1.2
A WebSockets library for interacting with WhatsApp Web
OpenSSF/OSV Malicious Advisory
imported 2h ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-18674 confirms this npm version as malicious.
Advisory
MAL-2026-18674
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @bellaxchan/techxatz (npm)
Details
@bellaxchan/techxatz is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel ID(s) (stored base64-encoded), using the victim's authenticated session and without telling them. Same behaviour as the PhantomSub family (MAL-2026-17342).
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package is suspicious because ordinary socket creation schedules repeated newsletter FOLLOW requests without an explicit user request. The requests use an empty newsletter ID, so the source does not establish a successful action against a publisher-chosen target.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Creating the package’s normal message socket; the requests are scheduled after a delay.
Impact
This attempts an account action without an explicit user request. The empty target means the source does not establish that a publisher-selected newsletter is followed.
Mechanism
The newsletter socket factory calls its WhatsApp query transport three times using the FOLLOW query ID and an empty decoded base64 string as the newsletter ID.
AI rationale
The package is suspicious because ordinary socket creation schedules repeated newsletter FOLLOW requests without an explicit user request. The requests use an empty newsletter ID, so the source does not establish a successful action against a publisher-chosen target.
Evidence
lib/Socket/newsletter.jslib/Socket/username.jslib/Socket/messages-send.js
Network endpoints1
web.whatsapp.com
Independent scan evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for AI warning decision
- Creating the newsletter socket schedules three FOLLOW queries with an empty newsletter ID, without requiring a newsletter API call.
- The normal socket factory chain creates the newsletter socket when the package’s message socket is made.
Evidence against
- The attempted FOLLOW requests contain no newsletter target, so the source does not establish that they follow a publisher-chosen account.
- The package is a WhatsApp WebSocket library, and its install hook only checks the Node.js version.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Oversized source lightweight scan
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
5 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @bellaxchan/techxatz@0.1.2.
See all versions of @bellaxchan/techxatz for other recorded verdicts.
- Avoid installing @bellaxchan/techxatz@0.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.