Malicious npm packages @exclipz/baileys and @exclipz/bails — typosquat-style malware grants full host compromise
Severity: critical · Patch status: no-fix-needed · Since 2026-11-06
GitHub published malware advisories on 2026-11-06 for two npm packages, @exclipz/baileys and @exclipz/bails, flagged as containing embedded malicious code (CWE-506). The names closely resemble the popular Baileys WhatsApp automation library, suggesting typosquatting or a compromised fork-style publication. GitHub's guidance states that any computer with these packages installed or running should be considered fully compromised, with full control potentially handed to an outside entity. All versions (= 0) are affected and no patched versions exist. Downloads are low (~39/month for @exclipz/bails), limiting reach, but any installation exposes secrets, keys, and credentials. Removal of the package does not guarantee removal of the malicious software.
What to do
- Check lockfiles and installed node_modules for @exclipz/baileys or @exclipz/bails and remove them
- Treat any machine where they ran as fully compromised: rotate all secrets, keys, and credentials from a clean machine
- Rebuild/reimage affected hosts and audit for persistence mechanisms
- Audit npm install logs and CI pipelines for historical installs of these packages
- Pin dependencies and verify package names carefully against the legitimate Baileys library (whiskeysockets/baileys)
Sources
All live incidents on Threat Watch
