GHSA-4c9v-m7qm-2mprPublished
Malicious code in @modss/baileys (npm)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
osv · MAL-2026-15918
- https://www.npmjs.com/package/@modss/baileys
- https://osv.dev/vulnerability/MAL-2026-15819
- https://osv.dev/vulnerability/MAL-2026-13932
- https://pkgwarden.com/incidents/baileys-whatsapp-auto-follow-npm-september-2026/
- https://github.com/advisories/GHSA-4c9v-m7qm-2mpr
- https://www.npmjs.com/package/@modss/baileys/v/2.0.0
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.