{"id":"MAL-2026-16473","revision":"eb331d9d4cda44cfa53fd6d074eebef8","records":[{"revision":"eb331d9d4cda44cfa53fd6d074eebef8","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-16473","aliases":[],"title":"Malicious code in sea-baileys (npm)","description":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2aaf4b5ddb859270a86aa6d21df680ed66fb0622434317747a6f7275ad9a3d60)\nsea-baileys is a fork of the Baileys WhatsApp Web library. Its package.json remaps the `libsignal` import specifier to `npm:@otaxayun/libsignal-node@latest` — an unrelated maintainer's package pinned to the mutable `latest` dist-tag rather than a fixed version or integrity hash. lib/Signal/libsignal.js routes the installer's Signal Protocol identity private key, signed pre-key private key, session records and sender keys through this dependency, so whatever code `@otaxayun/libsignal-node` resolves to at install time handles the consumer's WhatsApp cryptographic identity and message stream. Because the tag is mutable and owned by a third party outside the sea-baileys publisher, a single publish under that name replaces the crypto implementation on every subsequent `npm install`. Separately, lib/Utils/messages-media.js's prepareWAMessageMedia unconditionally attaches a hardcoded `annotations` block referencing the newsletter JID `120363409928671192@newsletter` (\"HOSHINO AI INFORMATION\") to every outgoing media message when the caller does not supply annotations, silently modifying consumer-generated WhatsApp payloads to advertise the fork author's channel.\n","state":0,"publishedAt":"2026-09-23T09:07:47+00:00","modifiedAt":"2026-09-23T09:30:04.9999152+00:00","affected":[{"ecosystem":"npm","name":"sea-baileys","ranges":[],"versions":["1.0.2"],"rawVersionEvidence":null}],"metrics":[],"references":["https://www.npmjs.com/package/sea-baileys/v/1.0.2"],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-16473","license":"OSV · upstream source license applies","key":"osv:MAL-2026-16473","identifiers":["MAL-2026-16473"]},"retained":false,"historicalAffected":[]}],"coverage":[]}