registry / Malware / @ubedsockets/baileys / 1.6.6

@ubedsockets/baileys@1.6.6

@ubedsockets/baileys,baileys A high-performance WhatsApp Web API wrapper based on Baileys, optimized for bot developers with integrated utility scrapers.

OpenSSF/OSV Malicious Advisory

imported 13h ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18600 confirms this npm version as malicious.

Advisory

MAL-2026-18600

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @ubedsockets/baileys (npm)

Details

Malicious package. `@ubedsockets/baileys` is a trojanized fork of the Baileys WhatsApp library (@whiskeysockets/baileys). On connection it issues an authenticated `w:mex` newsletter FOLLOW mutation (query_id 7871414976211147) that silently subscribes every victim to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs: 120363410154606795@newsletter, 120363423295236859@newsletter. Legitimate Baileys never hardcodes a channel JID or auto-follows on connect; all published versions are malicious. Detected by wormsign static analysis of the injected channel-subscription code.

References

OpenSSF/OSV advisory WEB

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The install hook is a benign Node.js version check, but the album handler adds unexplained spoofed metadata to outgoing media. The source supports a real messaging-integrity concern, though not a concrete attack objective.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

The socket's album handler runs for an album message.

Impact

Recipients may see album media represented as forwarded or starred content, with misleading status context. The source does not establish a clear malicious objective.

Mechanism

For each album item, the handler generates and relays a media message with forged forwarded, starred and status-broadcast metadata.

AI rationale

Evidence

lib/Socket/setup.js

Independent scan evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

The album handler generates and relays a separate media message for each album item to the supplied recipient.
Those media messages are assigned spoofed forwarded, starred and status-broadcast metadata.
The album media messages are relayed automatically when the album handler runs.

Evidence against

The preinstall script only checks the Node.js major version and exits if it is below 20.
The package entry exports the socket constructor and utilities; the flagged behavior is in a message handler.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 117 file(s), 3.07 MB of source, external domains: api.fruatre.my.id, api.ipify.org, api.siputzx.my.id, api.ubed.my.id, api.vreden.my.id, call.whatsapp.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.whatsapp.com

Source & flagged code

9 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

Findings

6 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritylib/Utils/messages-media.js

HighSecret Patternlib/WABinary/constants.js

HighSecret Patternlib/WABinary/constants.d.ts

MediumNetwork

MediumShips Build HelperWAProto/GenerateStatics.sh

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptolib/Utils/validate-connection.js

Affected versions and remediation

This report applies to @ubedsockets/baileys@1.6.6.

See all versions of @ubedsockets/baileys for other recorded verdicts.

Avoid installing @ubedsockets/baileys@1.6.6. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-04 06:55:30.445Z (UTC).

Source advisory published: 2026-11-02 15:50:08.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Malware / @ubedsockets/baileys / 1.6.6

@ubedsockets/baileys@1.6.6

@ubedsockets/baileys,baileys A high-performance WhatsApp Web API wrapper based on Baileys, optimized for bot developers with integrated utility scrapers.

OpenSSF/OSV Malicious Advisory

imported 13h ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18600 confirms this npm version as malicious.

Advisory

MAL-2026-18600

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @ubedsockets/baileys (npm)

Details

References

OpenSSF/OSV advisory WEB

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

The socket's album handler runs for an album message.

Impact

Recipients may see album media represented as forwarded or starred content, with misleading status context. The source does not establish a clear malicious objective.

Mechanism

For each album item, the handler generates and relays a media message with forged forwarded, starred and status-broadcast metadata.

AI rationale

Evidence

lib/Socket/setup.js

Independent scan evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

The album handler generates and relays a separate media message for each album item to the supplied recipient.
Those media messages are assigned spoofed forwarded, starred and status-broadcast metadata.
The album media messages are relayed automatically when the album handler runs.

Evidence against

The preinstall script only checks the Node.js major version and exits if it is below 20.
The package entry exports the socket constructor and utilities; the flagged behavior is in a message handler.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

9 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

Findings

6 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritylib/Utils/messages-media.js

HighSecret Patternlib/WABinary/constants.js

HighSecret Patternlib/WABinary/constants.d.ts

MediumNetwork

MediumShips Build HelperWAProto/GenerateStatics.sh

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptolib/Utils/validate-connection.js

Affected versions and remediation

This report applies to @ubedsockets/baileys@1.6.6.

See all versions of @ubedsockets/baileys for other recorded verdicts.

Avoid installing @ubedsockets/baileys@1.6.6. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-04 06:55:30.445Z (UTC).

Source advisory published: 2026-11-02 15:50:08.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages