Malicious code in alipclutch-baileys (npm)
The npm package alipclutch-baileys contained obfuscated malicious code that exfiltrated session state and message data to an attacker-controlled domain (fiora.nixel.my.id) during normal message-send operations. The malicious code was embedded in lib/Socket/messages-send.js using character-code obfuscation to evade detection.
- Disclosed
- Last updated
- Blast radius
- All users of the alipclutch-baileys npm package who installed affected versions
- Ecosystems
- Attack vectors
- Affected entities
- alipclutch-baileysnpm package; fork of Baileys WhatsApp library
The npm package alipclutch-baileys, a fork of the Baileys WhatsApp library, was found to contain malicious code that exfiltrates user data. The malicious payload was discovered in lib/Socket/messages-send.js, where a network destination was constructed using String.fromCharCode() to decode to https://fiora.nixel.my.id/.
The use of character-code array obfuscation is a known technique to hide exfiltration destinations from source code review and automated scanners. The domain fiora.nixel.my.id is not a legitimate WhatsApp or Baileys endpoint and is unrelated to the package's stated purpose.
The obfuscated endpoint was placed directly on the message-send code path, meaning that session state and message data from package consumers would be automatically sent to the attacker-controlled host during normal package operation.
The incident was identified by Amazon Inspector and credited to the OpenSSF malicious-packages project.
Indicators of compromise
- Packages
- alipclutch-baileys
- Domains
- fiora.nixel.my.id
Remediation
- Remove alipclutch-baileys from all projects immediately
- Audit npm dependencies for any use of alipclutch-baileys or similar suspicious forks of legitimate libraries
- Rotate any WhatsApp session credentials or tokens that may have been exposed
- Review application logs for any unexpected outbound connections to fiora.nixel.my.id or similar suspicious domains
- Use npm audit and supply chain security tools to detect similar obfuscated malicious packages
- Consider using only official or well-maintained forks of Baileys from trusted sources
Sources
- GitHub Advisory GHSA-jw7v-xrmm-426j · GitHub Advisory Database
Cite this entry
"Malicious code in alipclutch-baileys (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 6, 2026; last updated August 6, 2026. https://supplychainattack.org/incident/malicious-code-in-alipclutch-baileys-npm-ih6ju3
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in akamaijs-sensorv1 (npm)
The npm package akamaijs-sensorv1, which advertises itself as an Akamai Bot Manager sensor generator, contains malicious code that executes hidden dynamic code and fetches remote instructions from a Google Calendar-based command-and-control channel. The package uses invisible Unicode characters to conceal executable code and establishes a covert remote-code execution sink controlled by an attacker-owned email account.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in twilio-hackerone-poc-afe6937c (npm)
The npm package twilio-hackerone-poc-afe6937c contained malicious preinstall/postinstall scripts that exfiltrate host metadata and environment variables to an external webhook, spawn a persistent daemon process, and attempt cross-tenant code injection in shared environments.
npmCompromised packageMalicious commit