{"id":"MAL-2026-18931","summary":"Malicious code in alisaai-baileys (npm)","details":"alisaai-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel ID(s) 120363401150921495@newsletter, 120363403865450077@newsletter, 120363421346448687@newsletter (stored as base64 strings), using the victim's authenticated session and without telling them. Same behaviour as the PhantomSub family (MAL-2026-17342).","modified":"2026-11-09T23:15:27.828629605Z","published":"2026-10-27T00:00:00Z","database_specific":{"iocs":{"files":[{"digests":{"sha256":"397962dac7f00ecdf7b87f26832327e85387158dd09cdd77cbca0dd42465b247"},"paths":["lib/Socket/newsletter.js"]},{"digests":{"sha256":"9141522793a9c22ccad11d54d6905ff3a9445a2e3414911f47ac75e0dc1c1b64"},"paths":["lib/Socket/newsletter.js"]},{"digests":{"sha256":"d3a49d2613f1dd9bc7e95af8e6705644427dc843ffc3bb6c8ff4c7f6e2f9f9f2"},"paths":["lib/Socket/newsletter.js"]}],"ips":[],"urls":[],"domains":[]}},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/alisaai-baileys"},{"type":"WEB","url":"https://www.ox.security/blog/phantomsub-malicious-npm-campaign-secretly-adds-users-to-whatsapp-spam-channels/"}],"affected":[{"package":{"name":"alisaai-baileys","ecosystem":"npm","purl":"pkg:npm/alisaai-baileys"},"versions":["10.0.0","11.0.0","11.1.0","11.2.0","8.5.4","9.0.0","9.1.0"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/alisaai-baileys/MAL-2026-18931.json"}}],"schema_version":"1.9.2","credits":[{"name":"CyberXYZ","contact":["https://cyberxyz.io"],"type":"FINDER"}]}