@lekzo/baileys@0.0.1

Analysis

@lekzo/baileys@0.0.1 is a combosquat clone of the @whiskeysockets/baileys WhatsApp library, published under the @lekzo scope. The package bundles a near-verbatim copy of the real Baileys source tree but declares runtime dependencies on @cacheable/node-cache and cache-manager, both of which are known-malicious packages, so installing this package pulls the malicious dependency chain into the installer's dependency tree. The package name reuses the canonical "baileys" brand under a different scope to deceive installers into treating it as the legitimate library.