dilxztech@1.0.0

Analysis

The package dilxztech@1.0.0 is a dependency-confusion attack targeting the legitimate @whiskeysockets/baileys WhatsApp Web library. The README instructs users to alias the real package name to this one via the npm alias mechanism ("@whiskeysockets/baileys": "npm:dilxztech"), so that installing the legitimate package name actually installs this package instead. The package has no real source repository (the repository URL points to npmjs[.]com, not a code host). This version (1.0.0) contains a benign preinstall hook that only checks the Node.js version, and the library code is a functional Baileys WhatsApp Web fork. The dependency-confusion alias establishes a vector for future versions to deliver malicious payloads under the guise of the legitimate package name.