ynastore-baileys
WhatsApp API Modification
This report shows the evidence for ynastore-baileys@1.0.21. 1 of 2 known versions is blocked or flagged. See all versions.
This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.
OpenSSF/OSV Malicious Advisory
imported 3mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-13470 confirms this npm version as malicious.
Advisory
MAL-2026-13470
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in ynastore-baileys (npm)
Details
ynastore-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js line 425 and 436 reconstruct a network destination via String.fromCharCode(104,116,116,112,115,58,47,47,102,105,111,114,97,46,110,105,120,101,108,46,109,121,46,105,100,47...), which decodes to https://fiora.nixel.my.id/. Encoding a network host as a decimal char-code array to hide it from source-tree inspection is the exfiltration/silent-relay obfuscation pattern; a legitimate first-party endpoint in a WhatsApp library would appear as a plain URL literal. The host fiora.nixel.my.id is not a Baileys/WhatsApp-associated domain, and the messages-send code path is invoked as part of the library's normal send flow, so message-related data belonging to consumers of this fork is routed to an author-controlled destination during ordinary use.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package is not shown to contain malicious install-time or covert behavior, but it exposes a concrete runtime shell-injection vulnerability through normal media processing.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Application code invokes video media-message preparation with a crafted local file path.
Impact
Arbitrary shell command execution with the host application's privileges.
Mechanism
unsafely interpolated filename passed to child_process.exec
AI rationale
The package is not shown to contain malicious install-time or covert behavior, but it exposes a concrete runtime shell-injection vulnerability through normal media processing.
Evidence
lib/Utils/messages-media.jslib/Utils/messages.jspackage.jsonengine-requirements.js
Independent scan evidence
public snapshotAI called this Suspicious at 95.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for AI warning decision
- lib/Utils/messages-media.js builds an ffmpeg shell command by interpolating a media file path, then calls child_process.exec.
- The video-thumbnail path reaches that helper from lib/Utils/messages.js; a caller-supplied local video path can reach the shell.
- This is a runtime command-injection/RCE risk, though no covert payload or exfiltration was found.
Evidence against
- package.json preinstall only runs engine-requirements.js, which checks Node's major version and exits on unsupported versions.
- No eval/vm/dynamic remote-code loader, credential harvesting, or AI-agent configuration mutation was found.
- Network code implements WhatsApp Web/media operations and explicit version checks, not install-time callbacks.
- lib/index.js only clears the console and prints package branding at import time.
Behavioral surface
ChildProcessCryptoFilesystemNetworkWebSocket
HighEntropyStrings
Source & flagged code
3 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgWAProto/index.jsView file
•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 8472622
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/messages-media.jsView file
•matchType = normalized_sha256
matchedPackage = my-auto-follow@1.0.3
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:bXktYXV0by1mb2xsb3c:1.0.3
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
2 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritylib/Utils/messages-media.js
MediumNetwork
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ynastore-baileys@1.0.21.
The versions list below shows the verdict for each recorded version.
- Avoid installing ynastore-baileys@1.0.21. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.