@mr-supun-fernando/supunmd-bail
WhatsApp API Modification By Supun Fernando
This report shows the evidence for @mr-supun-fernando/supunmd-bail@3.0.3, the only known version.
OpenSSF/OSV Malicious Advisory
imported 1mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-16387 confirms this npm version as malicious.
Advisory
MAL-2026-16387
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @mr-supun-fernando/supunmd-bail (npm)
Details
package.json declares `"libsignal": "github:tenka-san/libsignal-node"` — an off-registry dependency source pointing at a personal-user GitHub repository with no commit SHA, no tag, and no integrity check. On `npm install`, npm clones the current tip of that repository and installs whatever it contains, running any lifecycle scripts (`preinstall`/`install`/`postinstall`/`prepare`) inside the fetched tree on the installer's machine. The dependency key `libsignal` shadows the well-known Signal protocol library, but the source is a personal user's fork rather than the upstream signalapp organization, so whoever controls the tenka-san/libsignal-node repository controls install-time code execution on every installer of this package. The source is mutable — content that resolves benign today can be replaced without any change to this package. A secondary observation: lib/Utils/generics.js line 403 references `ping`, but this is unrelated to the primary install-time execution concern.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package contains a concrete shell-injection primitive reachable through its exported media functionality. Static inspection did not show malicious lifecycle behavior, so this warrants a warning rather than a publication block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A consumer calls the video-thumbnail helper with a crafted file path.
Impact
An attacker able to control that path could run commands with the consuming application's privileges.
Mechanism
The helper builds an ffmpeg command with template interpolation and passes it to exec, which uses a shell.
AI rationale
The package contains a concrete shell-injection primitive reachable through its exported media functionality. Static inspection did not show malicious lifecycle behavior, so this warrants a warning rather than a publication block.
Evidence
lib/Utils/messages-media.js
Independent scan evidence
public snapshotAI called this Suspicious at 90.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for AI warning decision
- The exported video-thumbnail helper interpolates its file-path argument into a shell command and runs it with child_process.exec, allowing shell metacharacters in a caller-controlled path to execute commands.
- The only install hook invokes a local Node-version check; no self-dependency or install-time network action was found.
Evidence against
- The shell execution is in a media-thumbnail helper, not an automatic install or import-time attack path.
- The inspected business upload code passes media to a caller-provided upload function and removes its temporary file afterward.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
5 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @mr-supun-fernando/supunmd-bail@3.0.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing @mr-supun-fernando/supunmd-bail@3.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.