Malicious npm package @chatbridgeworld/baileys — full host compromise; rotate all secrets
Severity: critical · Patch status: no-fix-needed · Since 2026-11-09
GitHub's malware advisory database published GHSA-fjhf-q8f8-r96j on 2026-11-09 flagging the npm package @chatbridgeworld/baileys as embedded malicious code (CWE-506). Every published version (= 0) is affected and no patched version exists. The advisory states that any computer with the package installed or running should be considered fully compromised, meaning attackers may have obtained full control of the host, including access to secrets, keys and credentials. The package is a typosquat-style clone of the Baileys WhatsApp library with roughly 909 weekly downloads. Removal of the package does not guarantee removal of any malware it installed. Organisations that installed it must treat all credentials on affected machines as stolen and rotate them from a clean machine.
What to do
- Isolate and rebuild any machine where the package was installed or run; do not trust the existing OS
- Rotate all secrets, keys, tokens and credentials stored on or accessible from affected machines, from a clean computer
- Audit for persistence mechanisms and lateral movement from affected hosts
- Remove the package from dependencies and lockfiles and block it in CI/registry allowlists
- Review logs for outbound connections or data exfiltration since installation
Sources
All live incidents on Threat Watch
