Malicious Code Injection in @lendxntaa/baileys: Covert Channel Subscription Vulnerability
Summary
MAL-2026-17365: Malicious code in @lendxntaa/baileys (npm). Affects @lendxntaa/baileys versions 9.0.1 – 9.5.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @lendxntaa/baileys package is a fork of the Baileys WhatsApp Web library, designed to facilitate interactions with the WhatsApp Web API. It is part of a larger family of similar packages that have been identified as potentially malicious. These packages are intended to provide developers with tools to build WhatsApp bots and applications but have been compromised to include harmful code that exploits users' authenticated sessions.
Vulnerability Detail
The vulnerability arises from malicious code injected into the @lendxntaa/baileys package, which executes an unauthorized FOLLOW query to subscribe the victim's WhatsApp account to attacker-controlled channels. This occurs silently upon connection, leveraging the user's own authenticated session without their consent. The malicious code employs various obfuscation techniques to hide the target JIDs from casual inspection, making it difficult for users to detect the threat. The attack does not exfiltrate credentials or execute arbitrary code but does abuse the user's session for malicious purposes.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall @lendxntaa/baileysIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, avoid using the @lendxntaa/baileys package until it has been updated to a secure version. Consider using alternative libraries that provide similar functionality without the associated risks.
Conclusion
The @lendxntaa/baileys package contains a serious vulnerability that can compromise user accounts by subscribing them to unwanted channels. It is crucial to update to a patched version or find alternative solutions to ensure the safety of your applications. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for @lendxntaa/baileys →
FAQ
The vulnerability involves malicious code that subscribes users to unwanted WhatsApp channels using their authenticated sessions.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Check your package-lock.json file with Vulert's playground at Vulert Scanner.
The primary consequence is that users may be unknowingly subscribed to channels they did not choose, which can lead to spam or unwanted content.
While this vulnerability does not exfiltrate credentials, it does misuse your authenticated session for malicious purposes.
Immediately update the package to the latest version or remove it from your project to mitigate the risk.
