registry / Malware / @mrlegendbot/baileys

@mrlegendbot/baileys

Self-modified fork of Baileys with friend-compatible sendjson, richMenu, pollMenu and makeFakeCommand helpers.

This report shows the evidence for @mrlegendbot/baileys@1.2.5. 2 of 10 known versions are blocked or flagged. The newest version, 1.2.9, is flagged. See all versions.

This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.

OpenSSF/OSV Malicious Advisory

imported 2mo ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-15819 confirms this npm version as malicious.

Advisory

MAL-2026-15819

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @mrlegendbot/baileys (npm)

Details

@mrlegendbot/baileys is a fork of the WhatsApp Web library @whiskeysockets/baileys that silently makes the victim account follow attacker-chosen WhatsApp newsletter channels. lib/Socket/newsletter.js adds a startAutoFeatures() function (line 230) that is scheduled with setTimeout(() => startAutoFeatures(fullSock), 0) at socket construction (line 255), unconditionally and with no API surface exposing it. It fetches https://raw.githubusercontent.com/travatiger/MrLegend/refs/heads/main/Chids.json (line 236), parses the response as a list of channel ids, and calls sockInstance.newsletterFollow(id) for each one (line 246) on the caller's authenticated session, stepping through the list every 10 seconds (FOLLOW_INTERVAL = 10000, line 232). Because the list is fetched from a GitHub repository at run time, targeting can be changed without a new package release. Diffing lib/Socket against upstream @whiskeysockets/baileys 7.0.0-rc14 confirms this block has no upstream equivalent; the install-time scripts (engine-requirements.js, WAProto/compiler.js) are identical to upstream and are not the malicious surface. Versions 1.2.4 and 1.2.5 carry a byte-identical lib/Socket/newsletter.js (sha256 ce758c152d280832677c6dc5048832bad61b4f9391b3f33b0e3e02b12f023ded); tarball sha256 a746711435f15237c5f2cb08134937f1260a807f2356509fc8bc92db15d304e9 (1.2.4) and fd2c510df110af2122551b7fa56a3e0d42f20f43f7c9f4b8135afddef33065c0 (1.2.5). This is the same WhatsApp newsletter auto-follow campaign reported in MAL-2026-13929 and MAL-2026-13932. Two independent static reviews by pkgwarden reached the same conclusion; the package was not executed and the control URL was not requested.

References

OpenSSF/OSV advisory PACKAGE ADVISORY ADVISORY

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory

Affected versions and remediation

This report applies to @mrlegendbot/baileys@1.2.5.

The same advisory and Firewall decision cover 2 recorded versions

1.2.4, 1.2.5

The versions list below shows the verdict for each recorded version.

Avoid installing @mrlegendbot/baileys@1.2.5. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-02 08:00:05.807Z (UTC).

Source advisory published: 2026-09-01 00:00:00.000Z (UTC).

This report uses published external intelligence. The advisory does not provide a separate source-code analysis for each listed version.

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

10 known versions

OpenSSF/OSV Malicious Advisory

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages