0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
mikudeveloper-baileys
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting mikudeveloper-baileys, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-16386 | Unknown | Malicious code in @mikudeveloper/baileys (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d03bf7166a5353a0b22409ebbb724ee53f24394c9ff340df668c970772796e28) This package is a fork of Baileys that declares `libsignal` in `package.json` as `github:tenka-san/libsignal-node` — a git dependency with no commit SHA, tag, or integrity check, resolving to whatever HEAD returns at install time and executing any lifecycle scripts inside it. The referenced GitHub account is unrelated to the upstream WhiskeySockets/libsignal-node maintainer, so its owner controls install-time code on every installer of this |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d03bf7166a5353a0b22409ebbb724ee53f24394c9ff340df668c970772796e28) This package is a fork of Baileys that declares `libsignal` in `package.json` as `github:tenka-san/libsignal-node` — a git dependency with no commit SHA, tag, or integrity check, resolving to whatever HEAD returns at install time and executing any lifecycle scripts inside it. The referenced GitHub account is unrelated to the upstream WhiskeySockets/libsignal-node maintainer, so its owner controls install-time code on every installer of this