@bottino/baileys@1.0.1

Analysis

@bottino/baileys is a combosquat of the baileys WhatsApp API library (canonical @whiskeysockets/baileys). Its preinstall hook only checks the Node.js version, but the package's runtime code (lib/Socket/messages-send.js, messages-recv.js, chats.js, index.js, lib/Utils/auth-utils.js) imports the dependency @cacheable/node-cache, which is a known-malware package. Installing this package pulls the compromised dependency into the dependency tree and executes it at runtime.