{"items":[{"id":"NVI-00012399","kind":"supply_chain_event","title":"Malicious code in sea-baileys (npm)","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-9xjg-g5r3-xpj8"],"plain_summary":"GitHub lists this malware advisory for sea-baileys. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-38b6b717b663c14796bf7fb7d5ee2557"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-38b6b717b663c14796bf7fb7d5ee2557","url":"https://github.com/advisories/GHSA-9xjg-g5r3-xpj8","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-9xjg-g5r3-xpj8","publisher":"GitHub Advisory Database","observed_at":"2026-11-01T00:59:09.082Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-38b6b717b663c14796bf7fb7d5ee2557"],"technology":"sea-baileys","known_exclusions":[],"conditions_summary":"## Source: amazon-inspector (2aaf4b5ddb859270a86aa6d21df680ed66fb0622434317747a6f7275ad9a3d60)\nsea-baileys is a fork of the Baileys WhatsApp Web library. Its package.json remaps the `libsignal` import specifier to `npm:@otaxayun/libsignal-node@latest` — an unrelated maintainer's package pinned to the mutable `latest` dist-tag rather than a fixed version or integrity hash. lib/Signal/libsignal.js routes the installer's Signal Protocol identity private key, signed pre-key private key, session records and sender keys through this dependency, so whatever code `@otaxayun/libsignal-node` resolves to at install time handles the consumer's WhatsApp cryptographic identity and message stream. Because the tag is mutable and owned by a third party outside the sea-baileys publisher, a single publish under that name replaces the crypto implementation on every subsequent `npm install`. Separately, lib/Utils/messages-media.js's prepareWAMessageMedia unconditionally attaches a hardcoded `annotations` block referencing the newsletter JID `120363409928671192@newsletter` (\"HOSHINO AI INFORMATION\") to every outgoing media message when the caller does not supply annotations, silently modifying consumer-","public_affected_ranges":["= 1.0.2"]}],"null_published_at":"2026-11-01T01:45:40.758Z","source_updated_at":"2026-09-23T09:30:36.000Z","source_disclosed_at":"2026-09-23T09:30:29.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-01T00:59:09.082Z"}],"next_cursor":null,"snapshot_revision":"42594"}