xzvbailsx
This report shows the evidence for xzvbailsx@1.0.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 1mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-16279 confirms this npm version as malicious.
Advisory
MAL-2026-16279
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in xzvbailsx (npm)
Details
package.json declares the dependency `libsignal` with source `github:tenka-san/libsignal-node`, an unpinned GitHub ref with no commit SHA, tag, or integrity hash. On `npm install`, npm fetches whatever HEAD of that repository currently points at and executes any lifecycle scripts (preinstall/install/postinstall) it contains on the installer's machine. The referenced GitHub account is a personal repository unrelated to the WhiskeySockets/Baileys upstream that this package forks. Provenance is further obscured by an identity mismatch: the package is published as `xzvbailsx` but README/examples describe it as `@XzV-RxVz/xbails`, and the `repository` field points to Telegram handles (`t.me/JustRxVz`, `t.me/XzV_ExpzC`) rather than a source repository.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package is not shown to be malware, but it contains a concrete command-injection path in a public media utility. The transparent Node-version preinstall hook does not mitigate that runtime risk.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
An application calls video thumbnail generation with an attacker-controlled path or destination value.
Impact
An attacker may execute shell commands with the privileges of the application process.
Mechanism
Unquoted interpolation into child_process.exec.
AI rationale
The package is not shown to be malware, but it contains a concrete command-injection path in a public media utility. The transparent Node-version preinstall hook does not mitigate that runtime risk.
Evidence
lib/Utils/messages-media.js
Independent scan evidence
public snapshotAI called this Suspicious at 90.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for AI warning decision
- The media thumbnail helper builds a shell command by interpolating file path and destination arguments without quoting, then passes it to child_process.exec.
- This can permit shell-command injection when an application supplies attacker-controlled media paths.
Evidence against
- The preinstall hook only checks the running Node.js major version and exits on unsupported versions.
- No source evidence of credential harvesting, covert exfiltration, persistence, self-dependency, or agent-control-surface changes was found.
- Network routines implement explicit WhatsApp media/version operations rather than an install-time payload fetch.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
5 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
Affected versions and remediation
This report applies to xzvbailsx@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing xzvbailsx@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.