{"id":"MAL-2026-18670","kind":"package","aliases":["MAL-2026-18670"],"related":[],"title":"Malicious code in @axo_cuy/baileyss (npm)","description":"@axo_cuy/baileyss is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel ID(s) 120363412451922209@newsletter (stored base64-encoded), using the victim's authenticated session and without telling them. Same behaviour as the PhantomSub family (MAL-2026-17342).","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@axo_cuy/baileyss","fixed":[],"affected":"= 1.0.0; = 1.0.1; = 3.0.1","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-26T00:00:00+00:00","first_seen_at":"2026-11-05T06:31:44+00:00","triaged_at":"2026-11-05T06:32:52+00:00","updated_at":"2026-11-05T06:32:52+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-17342':87C '-18670':9A,12A '-2026':8A,11A,86C '120363412451922209':63C 'account':36C 'authent':73C 'axo':4A,13A,17C 'bailey':24C 'base64':67C 'base64-encoded':66C 'behaviour':80C 'channel':39C,60C 'chosen':40C 'code':2A,48C 'connect':47C 'cuy/baileyss':5A,14A,18C 'encod':68C 'famili':84C 'follow':56C 'fork':21C 'id':61C 'instal':32C 'lib/socket/newsletter.js':50C 'librari':27C 'mal':7A,10A,85C 'malici':1A,15B 'mex':55C 'newslett':64C 'npm':6A 'packag':16B 'phantomsub':83C 'publish':43C 'queri':57C 'send':51C 'session':74C 'silent':29C 'socket':46C 'store':65C 'subscrib':30C 'tell':77C 'use':69C 'victim':71C 'w':54C 'web':26C 'whatsapp':25C,35C,38C,53C 'without':76C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["baileyss"],"ptokens":["axo","baileyss","cuy"],"labels":["critical","malicious","npm","package"],"campaign_type":null,"first_public_at":"2026-10-26T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18670","url":"https://osv.dev/vulnerability/MAL-2026-18670","severity":"critical","published_at":"2026-10-26T00:00:00+00:00","modified_at":"2026-11-05T05:15:03+00:00","first_seen_at":"2026-11-05T06:31:44+00:00","fetched_at":"2026-11-05T06:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}