@revizahoshii/baileys@0.4.0

Analysis

This package impersonates the Baileys WhatsApp library (published under a different scope than the canonical @whiskeysockets/baileys) and runs a preinstall script (node ./engine-requirements.js) at install time. It declares a dependency on @cacheable/node-cache, a package previously identified as malicious. Installing this package executes its install hook and pulls in the malicious dependency.