Covert Channel Subscription Vulnerability in @bellaxchuu/velvetry Package
Summary
MAL-2026-17349: Malicious code in @bellaxchuu/velvetry (npm). Affects @bellaxchuu/velvetry versions 0.1.3 – 0.1.4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @bellaxchuu/velvetry package is a fork of the Baileys WhatsApp Web library, designed to facilitate interactions with WhatsApp's API. It is part of a larger family of similar packages that have been identified as malicious. These packages are known for their ability to manipulate WhatsApp's socket layer, allowing unauthorized actions to be performed using the user's authenticated session. The vulnerability stems from the package's design, which allows it to inject malicious code that subscribes users to channels without their consent.
Vulnerability Detail
This vulnerability allows malicious code to be executed within the user's WhatsApp session. Upon connecting, the injected code sends an authenticated 'w:mex' FOLLOW query to attacker-controlled WhatsApp Channel/Newsletter JIDs. This action subscribes the victim's account to channels they did not intend to join. The malicious code is obfuscated using various techniques, making it difficult to detect during casual code reviews. The vulnerability does not exfiltrate user credentials or execute arbitrary remote code, but it does misuse the user's authenticated session for unauthorized subscriptions.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall @bellaxchuu/velvetryIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If you cannot update the package immediately, consider removing the @bellaxchuu/velvetry package from your project. You can do this by executing the following command: npm uninstall @bellaxchuu/velvetry. Additionally, monitor your application for any unauthorized subscriptions to WhatsApp channels.
Conclusion
The @bellaxchuu/velvetry package has a significant vulnerability that allows for unauthorized channel subscriptions using the user's WhatsApp session. It is crucial for users of this package to update to a patched version or remove the package entirely to mitigate risks. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for @bellaxchuu/velvetry →
FAQ
The package contains malicious code that subscribes users to WhatsApp channels without their consent.
You can use Vulert, which monitors open-source vulnerabilities in your software. By checking your package-lock.json file, Vulert can alert you in real-time for any vulnerabilities.
As a temporary measure, you can uninstall the package and monitor your application for unauthorized activity.
Yes, you can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
No, the vulnerability does not exfiltrate user credentials, but it does misuse the authenticated session for unauthorized actions.
