@sahril2nd/baileys@1.0.21

Analysis

A fork of the Baileys WhatsApp library published under a different scope (@sahril2nd/baileys) that declares dependencies on packages previously identified as malicious: cache-manager@4.0.1 and @cacheable/node-cache@^1.4.0. Installing this package pulls in those known-malicious dependencies as part of its dependency tree. The package also ships a preinstall hook (engine-requirements.js) that only checks the Node.js version, and its own source is a modified Baileys fork with added WhatsApp Business features.