{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "lib/Store/prototype-store.js",
              "sha256": "e0c92c05bd5a2306e56689e127d39d8b01221ea659b915cf8f3a135c48fe86ec",
              "tlsh": "ccc2429449f21c1406b3317aae4b7001726590973949ed687f8e93d81fce0b9e6f2bed"
            }
          ],
          "package_integrity": [
            {
              "filename": "baileys-0.0.3.tgz",
              "hashes": {
                "sha1": "056c06d25543a834f070d247688778ccafb53acb",
                "sha512_sri": "sha512-oh6SvWMNIgy99glPlbWYA4Orp6atbm6b1Lq2+nHZUyeHl4jB0jvcLxVFbtw2/4vM4pp6c6vfXP066TmX7xsohA=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@prototypevip/baileys"
      },
      "versions": [
        "0.0.3"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-016854",
        "import_time": "2026-08-07T00:59:22.11237425Z",
        "modified_time": "2026-08-06T23:57:30Z",
        "sha256": "f4b0068015e90b8e47dd9b67c66ed1d0b0cc4c1ebccd985f08efd31837d27ce8",
        "source": "amazon-inspector",
        "versions": [
          "0.0.3"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f4b0068015e90b8e47dd9b67c66ed1d0b0cc4c1ebccd985f08efd31837d27ce8)\n@prototypevip/baileys is a fork of the Baileys WhatsApp library. lib/Store/prototype-store.js registers a listener on the \u0027messages.upsert\u0027 event that runs on every incoming message. The listener body is obfuscated behind a base64 string table and a decoder (Buffer.from(s,\u0027base64\u0027).toString(\u0027utf8\u0027)), which resolves to the property names \u0027type\u0027, \u0027md\u0027, \u0027ws\u0027, \u0027sendMessage\u0027, an Arabic message body (\u0027you are no longer authorized to use this bot\u0027), and the marker \u0027gintoki\u0027. When the routine walks the message object and locates the active WhatsApp socket (type==\u0027md\u0027, ws truthy), it compares an adjacent key against the decoded literal \u0027gintoki\u0027. On any installer whose bot is not tagged with that hardcoded owner string, the code invokes the installer\u0027s own socket\u0027s sendMessage to broadcast the Arabic \u0027no longer authorized\u0027 notice through the installer\u0027s WhatsApp account and then throws \u0027Blocked\u0027 (also base64-decoded) to halt message handling. The behavior is undocumented, is hidden by base64 obfuscation of every relevant string, and abuses the installer\u0027s authenticated WhatsApp session as the delivery channel to send attacker-authored content to the installer\u0027s own contacts.\n",
  "id": "MAL-2026-13480",
  "modified": "2026-08-06T23:57:30Z",
  "published": "2026-08-06T23:57:30Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@prototypevip/baileys/v/0.0.3"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @prototypevip/baileys (npm)"
}