xzvbailey
This report shows the evidence for xzvbailey@1.0.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 1mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-16278 confirms this npm version as malicious.
Advisory
MAL-2026-16278
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in xzvbailey (npm)
Details
package.json declares the `libsignal` dependency as `github:tenka-san/libsignal-node`, a non-registry source pointing at a personal GitHub account with no tag or commit SHA. On `npm install`, npm fetches whatever the default branch's HEAD points to at that moment and runs any lifecycle scripts inside the cloned repo, so the owner of that account controls code that executes on the installer's machine. The account is unrelated to the upstream Baileys/libsignal publishers, and the package's own metadata is inconsistent (homepage and repository fields point at a Telegram URL while the bug tracker points at a different GitHub org, `pou-code/Baileys`), which is consistent with a repackaged Baileys lure rather than a legitimate fork.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package does not show a concrete malicious payload or harmful lifecycle action, but it exposes a directly reachable command-injection flaw in media processing. This warrants a warning rather than publication blocking.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A consumer calls generateThumbnail for video media with attacker-controlled path input.
Impact
Arbitrary commands can run with the consuming process's privileges.
Mechanism
Unquoted path interpolation into child_process.exec.
AI rationale
The package does not show a concrete malicious payload or harmful lifecycle action, but it exposes a directly reachable command-injection flaw in media processing. This warrants a warning rather than publication blocking.
Evidence
lib/Utils/messages-media.js
Independent scan evidence
public snapshotAI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for AI warning decision
- The video-thumbnail helper interpolates its path arguments into a shell command passed to child_process.exec, allowing command injection when an attacker controls the media path.
Evidence against
- The preinstall hook only checks the Node.js major version and exits when it is below 20.
- The inspected network and file operations implement caller-invoked WhatsApp media upload, download, and temporary-file handling.
- The reviewed business and constants files contain protocol and media logic, not a hard-coded credential or collection routine.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
GitDependency
Oversized source lightweight scan
WAProto/index.js11.6 MB file, sampled 256 KB
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/Utils/validate-connection.jsView file
107pull: false,
L108: devicePairingData: {
L109: buildHash: appVersionBuf,
...
L134: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content);
L135: let hmacPrefix = Buffer.from([]);
L136: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) {
...
L158: ]);
L159: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg);
L160: const identity = createSignalIdentity(lid, accountSignatureKey);
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L107WAProto/GenerateStatics.shView file
•path = WAProto/GenerateStatics.sh
kind = build_helper
sizeBytes = 302
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgWAProto/index.jsView file
•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 12145764
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/business.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/Utils/business.jsView on unpkglib/Utils/messages-media.jsView file
•matchType = normalized_sha256
matchedPackage = xzvbails@0.0.1
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:eHp2YmFpbHM:0.0.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages-media.jsView on unpkgFindings
5 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to xzvbailey@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing xzvbailey@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.