@ikyyjee/ikkysingle
This report shows the evidence for @ikyyjee/ikkysingle@0.1.2. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.0-stage, is allowed. See all versions.
OpenSSF/OSV Malicious Advisory
imported 23d ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-17356 confirms this npm version as malicious.
Advisory
MAL-2026-17356
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @ikyyjee/ikkysingle (npm)
Details
This package is part of a large family (100+ identified as of September 2026) of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated `w:mex` FOLLOW query (query_id 7871414976211147) against one or more attacker-chosen WhatsApp Channel/Newsletter JIDs, using the installer's own authenticated WhatsApp session -- silently subscribing the victim's account to channels it never asked to join.
The target JID(s) are hidden from casual source review via one of several obfuscation techniques observed across the family: a plain string literal, base64 encoding, base64+XOR, or a char-code array reconstructed at runtime. Some variants instead fetch a mutable, attacker-controlled remote JSON/JS list of target JIDs from GitHub or another host at runtime, letting the target list change after installation without a new npm publish. Every sample in the family shares the same underlying mechanism (a wrapped/patched socket-connect routine that fires the FOLLOW query some seconds after connect), even though the package name, JID value(s), and obfuscation/delivery method differ per fork.
The malicious action abuses the installer's own authenticated WhatsApp session to gain reach and subscribers for attacker-controlled channels; it does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
Affected package: @ikyyjee/ikkysingle (npm), version(s): 0.1.2.
References
Independent LPM AI assessment
CleanIndependent AI assessment: clean. LPM AI assessed this version as clean; the assessments disagree.
The package is a poorly attributed WhatsApp-library fork, but direct inspection found no malicious lifecycle chain or exfiltration behavior. Its preinstall hook is limited to a Node.js version check.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Package installation runs the Node.js version check; application calls activate media features.
Impact
No unconsented persistence, credential harvesting, or project mutation was found.
Mechanism
Local version validation and caller-directed WhatsApp media transfer
AI rationale
The package is a poorly attributed WhatsApp-library fork, but direct inspection found no malicious lifecycle chain or exfiltration behavior. Its preinstall hook is limited to a Node.js version check.
Independent scan evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest runs a preinstall script, but its target only checks the Node.js major version.
- A media thumbnail helper constructs an ffmpeg shell command from its arguments; this is a user-invoked utility, not install-time behavior.
- The README identifies a different package, indicating poor provenance or repackaging.
- The scanner's secret match is a WhatsApp protocol-token string, not an embedded credential.
Evidence against
- The only automatic lifecycle action is a local version guard that prints an error and exits for Node.js below 20.
- No source reads environment secrets, user credential files, npm configuration, or SSH material.
- No source installs a second package, downloads code during installation, or modifies the consumer project.
- Network and temporary-file handling are used by the WhatsApp media upload and download features.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
GitDependency
Oversized source lightweight scan
WAProto/index.js11.6 MB file, sampled 256 KB
ChildProcess
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/Utils/validate-connection.jsView file
107pull: false,
L108: devicePairingData: {
L109: buildHash: appVersionBuf,
...
L134: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content);
L135: let hmacPrefix = Buffer.from([]);
L136: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) {
...
L158: ]);
L159: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg);
L160: const identity = createSignalIdentity(lid, accountSignatureKey);
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L107WAProto/GenerateStatics.shView file
•path = WAProto/GenerateStatics.sh
kind = build_helper
sizeBytes = 302
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgWAProto/index.jsView file
•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 12145764
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/business.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/Utils/business.jsView on unpkglib/Utils/messages-media.jsView file
•matchType = normalized_sha256
matchedPackage = @xayz/baileys@6.0.1
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:QHhheXovYmFpbGV5cw:6.0.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages-media.jsView on unpkgFindings
5 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @ikyyjee/ikkysingle@0.1.2.
The versions list below shows the verdict for each recorded version.
- Avoid installing @ikyyjee/ikkysingle@0.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.