MAL-2026-13480

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@prototypevip/baileys/MAL-2026-13480.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13480
Published
2026-08-06T23:57:30Z
Modified
2026-08-07T01:19:46.583411014Z
Summary
Malicious code in @prototypevip/baileys (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f4b0068015e90b8e47dd9b67c66ed1d0b0cc4c1ebccd985f08efd31837d27ce8)

@prototypevip/baileys is a fork of the Baileys WhatsApp library. lib/Store/prototype-store.js registers a listener on the 'messages.upsert' event that runs on every incoming message. The listener body is obfuscated behind a base64 string table and a decoder (Buffer.from(s,'base64').toString('utf8')), which resolves to the property names 'type', 'md', 'ws', 'sendMessage', an Arabic message body ('you are no longer authorized to use this bot'), and the marker 'gintoki'. When the routine walks the message object and locates the active WhatsApp socket (type=='md', ws truthy), it compares an adjacent key against the decoded literal 'gintoki'. On any installer whose bot is not tagged with that hardcoded owner string, the code invokes the installer's own socket's sendMessage to broadcast the Arabic 'no longer authorized' notice through the installer's WhatsApp account and then throws 'Blocked' (also base64-decoded) to halt message handling. The behavior is undocumented, is hidden by base64 obfuscation of every relevant string, and abuses the installer's authenticated WhatsApp session as the delivery channel to send attacker-authored content to the installer's own contacts.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-016854",
            "import_time": "2026-08-07T00:59:22.11237425Z",
            "sha256": "f4b0068015e90b8e47dd9b67c66ed1d0b0cc4c1ebccd985f08efd31837d27ce8",
            "modified_time": "2026-08-06T23:57:30Z",
            "source": "amazon-inspector",
            "versions": [
                "0.0.3"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @prototypevip/baileys

Package

Name
@prototypevip/baileys
View open source insights on deps.dev
Purl
pkg:npm/%40prototypevip/baileys

Affected ranges

Affected versions

0.*
0.0.3

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "lib/Store/prototype-store.js",
            "tlsh": "ccc2429449f21c1406b3317aae4b7001726590973949ed687f8e93d81fce0b9e6f2bed",
            "sha256": "e0c92c05bd5a2306e56689e127d39d8b01221ea659b915cf8f3a135c48fe86ec"
        }
    ],
    "package_integrity": [
        {
            "filename": "baileys-0.0.3.tgz",
            "hashes": {
                "sha1": "056c06d25543a834f070d247688778ccafb53acb",
                "sha512_sri": "sha512-oh6SvWMNIgy99glPlbWYA4Orp6atbm6b1Lq2+nHZUyeHl4jB0jvcLxVFbtw2/4vM4pp6c6vfXP066TmX7xsohA=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@prototypevip/baileys/MAL-2026-13480.json"