{"id":"MAL-2026-18440","kind":"package","aliases":["MAL-2026-18440"],"related":[],"title":"Malicious code in @axo_cuy/baileys (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48)\npackage.json declares a hard dependency `libsignal` with the source `github:tenka-san/libsignal-node`. This is an off-registry dependency source: `npm install` resolves it to the current HEAD of that third-party GitHub repository with no version/commit pin and no integrity check, and executes any lifecycle scripts shipped by that repository on the installer's machine. The owner of `tenka-san/libsignal-node` can change the installed code at any time without republishing this package. The target repository is not the upstream Baileys/libsignal publisher, so installation introduces a third-party code path that bypasses registry review and dependency pinning.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@axo_cuy/baileys","fixed":[],"affected":"= 1.0.0","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T01:45:17+00:00","first_seen_at":"2026-11-02T03:31:19+00:00","triaged_at":"2026-11-02T03:33:51+00:00","updated_at":"2026-11-02T03:33:51+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18440':9A,12A '-2026':8A,11A '/libsignal-node':44C,96C '0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48':30C 'amazon':28C 'amazon-inspector':27C 'axo':4A,13A 'baileys/libsignal':116C 'bypass':128C 'chang':98C 'check':75C 'code':2A,101C,125C 'current':59C 'cuy/baileys':5A,14A 'declar':32C 'depend':35C,51C,132C 'detail':19C 'edit':22C 'execut':77C 'github':40C,66C 'hard':34C 'head':60C 'inspector':29C 'instal':54C,87C,100C,119C 'integr':74C 'introduc':120C 'libsign':36C 'lifecycl':79C 'line':25C 'machin':89C 'mal':7A,10A 'malici':1A,15B 'npm':6A,53C 'off-registri':48C 'owner':91C 'packag':16B,108C 'package.json':31C 'parti':65C,124C 'path':126C 'per':17C 'pin':71C,133C 'publish':117C 'registri':50C,129C 'repositori':67C,84C,111C 'republish':106C 'resolv':55C 'review':130C 'san':43C,95C 'script':80C 'ship':81C 'sourc':18C,26C,39C,52C 'target':110C 'tenka':42C,94C 'tenka-san':41C,93C 'third':64C,123C 'third-parti':63C,122C 'time':104C 'upstream':115C 'version/commit':70C 'without':105C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["baileys"],"ptokens":["axo","baileys","cuy"],"labels":["critical","malicious","npm","package"],"first_public_at":"2026-11-02T01:45:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18440","url":"https://osv.dev/vulnerability/MAL-2026-18440","severity":"critical","published_at":"2026-11-02T01:45:17+00:00","modified_at":"2026-11-02T02:30:05+00:00","first_seen_at":"2026-11-02T03:31:19+00:00","fetched_at":"2026-11-02T03:31:19+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}