Malicious code in @ubedsockets/baileys (npm)
What's happening and what to do
Malicious code secretly makes every victim's WhatsApp account follow attacker-controlled channels as soon as it connects, letting the attacker push content through those accounts. npm package @ubedsockets/baileys, all published versions; a trojanized fork of the Baileys WhatsApp library. Remove @ubedsockets/baileys now and switch to the legitimate @whiskeysockets/baileys, then check your WhatsApp channel follows and project logs for unexpected newsletter subscriptions.
AI summary of the sources on this page. Regenerated when a source changes.
Affected versions
| Ecosystem | Package | Affected | Safe from |
|---|---|---|---|
| npm | @ubedsockets/baileys | all versions | None. Remove it. |
Signals over time
- 2026-11-04 09:50First seen here.
Source text
Malicious package. `@ubedsockets/baileys` is a trojanized fork of the Baileys WhatsApp library (@whiskeysockets/baileys). On connection it issues an authenticated `w:mex` newsletter FOLLOW mutation (query_id 7871414976211147) that silently subscribes every victim to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs: 120363410154606795@newsletter, 120363423295236859@newsletter. Legitimate Baileys never hardcodes a channel JID or auto-follows on connect; all published versions are malicious. Detected by wormsign static analysis of the injected channel-subscription code. --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/6282ccd01cbcaeab639c2217d5515a4869847d8b/osv/malicious/npm/@ubedsockets/baileys/MAL-2026-18600.json))