0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
dzyhaxz-baileys
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting dzyhaxz-baileys, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17622 | Unknown | Malicious code in dzyhaxz-baileys (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (03631e9889407ee8976e020933fa6984bd173c9a5de6b7a89ba7a5629437e705) dzyhaxz-baileys is a fork of the Baileys WhatsApp library that, on every WhatsApp `connection.open` event, silently calls `sock.newsletterFollow` for a hardcoded channel ID `120363411407993897@newsletter` with `autoFollowChannels` defaulting to true. The README explicitly states 'No hidden auto-follow: Channel operations (sock.newsletterFollow) are strictly explicit', directly contradicting the shipped behavior — any application built on th |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (03631e9889407ee8976e020933fa6984bd173c9a5de6b7a89ba7a5629437e705) dzyhaxz-baileys is a fork of the Baileys WhatsApp library that, on every WhatsApp `connection.open` event, silently calls `sock.newsletterFollow` for a hardcoded channel ID `120363411407993897@newsletter` with `autoFollowChannels` defaulting to true. The README explicitly states 'No hidden auto-follow: Channel operations (sock.newsletterFollow) are strictly explicit', directly contradicting the shipped behavior — any application built on th