registry / Dependency confusion / megan-baileys

megan-baileys

Lightweight WhatsApp Web API with multi-session support. Forked from Gifted Baileys 2.5.8 + latest WA protocol. Created by TrackerWanga.

This report shows the evidence for megan-baileys@1.0.11. 10 of 10 known versions are blocked or flagged. See all versions.

This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The lifecycle script silently hijacks another package's namespace, and runtime code performs undisclosed remote-controlled activity through user credentials. These are concrete malicious behaviors, not required Baileys compatibility operations.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall; later creation of a WhatsApp socket

Impact

Consumer imports of @whiskeysockets/baileys are redirected; authenticated WhatsApp activity is induced from an attacker-controlled list.

Mechanism

dependency namespace hijack plus covert remote-driven WhatsApp queries

Attack narrative

At install, the package removes the consumer's @whiskeysockets/baileys directory and writes a replacement manifest pointing imports to megan-baileys. When its normal socket construction path reaches makeNewsletterSocket, it waits 90 seconds, decodes and fetches a remote JID list, then sends WhatsApp MEX queries for every returned JID using the consumer's authenticated socket.

AI rationale

Evidence

package.jsonscripts/postinstall.jslib/Socket/newsletter.jslib/Socket/messages-send.jsnode_modules/@whiskeysockets/baileysnode_modules/@whiskeysockets/baileys/package.json

Network endpoints1

files.gifted.co.ke/file/chJids.json

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json runs postinstall.
scripts/postinstall.js deletes and replaces consumer node_modules/@whiskeysockets/baileys.
Replacement manifest redirects @whiskeysockets/baileys imports to this package.
lib/Socket/newsletter.js covertly fetches a Base64-hidden remote JID list and queries it through the user's authenticated WhatsApp socket.

Evidence against

FFmpeg execution and dynamic audio decoder import in lib/Utils/messages-media.js are media-processing features.
Other observed network calls support WhatsApp/media/version functionality.

Behavioral surface

Source

ChildProcessCryptoEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

GitDependency

scanned 95 file(s), 1.30 MB of source, external domains: mmg.whatsapp.net, raw.githubusercontent.com, web.whatsapp.com, www.whatsapp.com

Source & flagged code

11 flagged

package.jsonView file

Lines 33-56json

33 "music-metadata": "^7.12.3",

34 "node-fetch": "^2.6.1",

35 "pino": "^9.6",

36 "protobufjs": "^7.2.4",

37 "ws": "^8.13.0"

38 },

39 "exports": {

40 ".": {

41 "import": "./lib/index.mjs",

42 "require": "./lib/index.js",

43 "types": "./lib/index.d.ts"

44 },

45 "./*": {

46 "import": "./lib/*.mjs",

47 "require": "./lib/*.js",

48 "types": "./lib/*.d.ts"

49 }

50 },

51 "module": "./lib/index.mjs",

52 "scripts": {

53 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 }

55}

lib/WABinary/constants.jsView file

Lines 583-623javascript

583 '044',

584 'mms_cat_v1_forward_hot_override_enabled',

585 'user_notice',

586 'ptt_waveform_send',

587 '047',

588 'Asia/Calcutta',

589

lib/Utils/messages-media.jsView file

Lines 236-276javascript

236 const musicMetadata = await Promise.resolve().then(() => __importStar(require('music-metadata')));

237 let metadata;

lib/Socket/newsletter.jsView file

Lines 23-63javascript

23 mute_state: viewer.mute

24 };

25};

26const parseNewsletterMetadata = (result) => {

27 if (typeof result !== 'object'

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 140 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8402946 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/messages.jsView file

•matchType = normalized_sha256 matchedPackage = megan-baileys@1.0.6 matchedPath = lib/Utils/messages.js matchedIdentity = npm:bWVnYW4tYmFpbGV5cw:1.0.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/Utils/messages.jsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

603patternName = google_api_key severity = high line = 603 matchedText = 'AIzaSyD...Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L603

Findings

7 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighBase64 Obscured Urllib/Socket/newsletter.js

HighKnown Malware Source Similaritylib/Utils/messages-media.js

HighKnown Malware Source Similaritylib/Utils/messages.js

HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js

HighSecret Patternlib/WABinary/constants.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumShips Build HelperWAProto/GenerateStatics.sh

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

Affected versions and remediation

This report applies to megan-baileys@1.0.11.

The versions list below shows the verdict for each recorded version.

Avoid installing megan-baileys@1.0.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-09 02:00:04.617Z (UTC).

Source advisory published: 2026-09-03 18:09:54.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

10 known versions

1.0.11latestshownMaliciousDependency ConfusionBlockPublishedJul 22, 2026, 11:21 AM 1.0.9MaliciousMalwareBlockPublishedJul 22, 2026, 10:29 AM 1.0.8MaliciousDependency ConfusionBlockPublishedJul 22, 2026, 10:16 AM 1.0.6MaliciousMalwareBlockPublishedJul 22, 2026, 10:06 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other dependency confusion packages

Runtime surface

Behavioral surface

Related packages

Other dependency confusion packages

Source & flagged code