# GitHub Advisory malware sweep, 10 November 2026

> 270+ packages from GitHub malware advisories published 10 November 2026. Dominated by a Baileys WhatsApp library fork flood (~250 npm packages). Also: dependency-confusion probes targeting Telefonica, ING and Fidelity, CWE-506 boilerplate takedowns, and a PyPI Discord-webhook lure.

- Published: 2026-11-10
- Severity: medium
- Kind: Advisory sweep - A dated batch of GitHub Advisory Database malware entries collected together. A sweep mixes kinds - typosquats, dependency-confusion probes, boilerplate takedowns with no published analysis, and occasionally real payloads - and its severity reflects the worst confirmed item, not the batch as a whole.
- Ecosystems: npm, PyPI
- Scope: 113 packages, 125 compromised versions
- Tags: dependency-confusion, typosquat, obfuscation
- Detected by: OpenSSF, amazon-inspector
- Incident ID: multi-2026-11-10-ghsa-malware-sweep

## Affected packages (113)

Only the exact versions listed were named by the source advisories. Other versions are not implicated.

| Package | Ecosystem | Compromised versions |
|---|---|---|
| [@aboutdisz/baileys](https://dependencywatch.io/package/npm/@aboutdisz/baileys) | npm | * |
| [@alzx7z/baileys](https://dependencywatch.io/package/npm/@alzx7z/baileys) | npm | * |
| [@animebails/baileys](https://dependencywatch.io/package/npm/@animebails/baileys) | npm | * |
| [@arkanhahaha/baileys](https://dependencywatch.io/package/npm/@arkanhahaha/baileys) | npm | * |
| [@baileys-md/baileys](https://dependencywatch.io/package/npm/@baileys-md/baileys) | npm | * |
| [@barz-dev/baileys](https://dependencywatch.io/package/npm/@barz-dev/baileys) | npm | * |
| [@bellachu/bails](https://dependencywatch.io/package/npm/@bellachu/bails) | npm | * |
| [@billabilloyy/baileys](https://dependencywatch.io/package/npm/@billabilloyy/baileys) | npm | * |
| [@bmbxmd/baileys](https://dependencywatch.io/package/npm/@bmbxmd/baileys) | npm | * |
| [@bufferstudio/baileys-natsu](https://dependencywatch.io/package/npm/@bufferstudio/baileys-natsu) | npm | * |
| [@conduitops/logview-archive](https://dependencywatch.io/package/npm/@conduitops/logview-archive) | npm | * |
| [@daffaadev/baileys](https://dependencywatch.io/package/npm/@daffaadev/baileys) | npm | * |
| [@daffaadev/baileyss](https://dependencywatch.io/package/npm/@daffaadev/baileyss) | npm | * |
| [@daffadevv/baileys](https://dependencywatch.io/package/npm/@daffadevv/baileys) | npm | * |
| [@danzxcode/danzx-bail](https://dependencywatch.io/package/npm/@danzxcode/danzx-bail) | npm | * |
| [@darling-2002/baileys](https://dependencywatch.io/package/npm/@darling-2002/baileys) | npm | * |
| [@denzy-official/baileys](https://dependencywatch.io/package/npm/@denzy-official/baileys) | npm | * |
| [@devpeacemaker/baileys](https://dependencywatch.io/package/npm/@devpeacemaker/baileys) | npm | * |
| [@factoryz/apollo](https://dependencywatch.io/package/npm/@factoryz/apollo) | npm | * |
| [@fcsmc/commercial-analytics](https://dependencywatch.io/package/npm/@fcsmc/commercial-analytics) | npm | * |
| [@fmr-ap149494/apex-base-component](https://dependencywatch.io/package/npm/@fmr-ap149494/apex-base-component) | npm | * |
| [@fmr-ap153177/apex-kit-icons](https://dependencywatch.io/package/npm/@fmr-ap153177/apex-kit-icons) | npm | * |
| [@fr3xtoy/baileys](https://dependencywatch.io/package/npm/@fr3xtoy/baileys) | npm | * |
| [@futurae-public/adaptive-js](https://dependencywatch.io/package/npm/@futurae-public/adaptive-js) | npm | * |
| [@gaxtamvan/baileys](https://dependencywatch.io/package/npm/@gaxtamvan/baileys) | npm | * |
| [@generic-means/ing-feat-scanner-libs](https://dependencywatch.io/package/npm/@generic-means/ing-feat-scanner-libs) | npm | * |
| [@getsuzocompany/system](https://dependencywatch.io/package/npm/@getsuzocompany/system) | npm | * |
| [@hanzzy/baileys](https://dependencywatch.io/package/npm/@hanzzy/baileys) | npm | * |
| [@hanzzy/baileys-mod](https://dependencywatch.io/package/npm/@hanzzy/baileys-mod) | npm | * |
| [@hanzzy/baileys-new](https://dependencywatch.io/package/npm/@hanzzy/baileys-new) | npm | * |
| [@hanzzyy/baileys](https://dependencywatch.io/package/npm/@hanzzyy/baileys) | npm | * |
| [@jm-telefonica/multibrand-components](https://dependencywatch.io/package/npm/@jm-telefonica/multibrand-components) | npm | * |
| [@modzneverdie/baileys](https://dependencywatch.io/package/npm/@modzneverdie/baileys) | npm | * |
| [@openyard/vetcode](https://dependencywatch.io/package/npm/@openyard/vetcode) | npm | * |
| [@pinaapalerie/baileys](https://dependencywatch.io/package/npm/@pinaapalerie/baileys) | npm | * |
| [@postex/common](https://dependencywatch.io/package/npm/@postex/common) | npm | * |
| [@purpleiriss/irisbail](https://dependencywatch.io/package/npm/@purpleiriss/irisbail) | npm | * |
| [@vanzky/baileys](https://dependencywatch.io/package/npm/@vanzky/baileys) | npm | * |
| [@zeppeliorg/wbails](https://dependencywatch.io/package/npm/@zeppeliorg/wbails) | npm | * |
| [arkaan-amane-baileys](https://dependencywatch.io/package/npm/arkaan-amane-baileys) | npm | * |
| [byleeosbaileys](https://dependencywatch.io/package/npm/byleeosbaileys) | npm | * |
| [changli-baileys](https://dependencywatch.io/package/npm/changli-baileys) | npm | * |
| [dct-dula-dev-baileys](https://dependencywatch.io/package/npm/dct-dula-dev-baileys) | npm | * |
| [dowload_ebok_frau_holle_die_nordische_gottin_hulle_und_ihr_gef_by_holger_karsten_schmid_1u2dk](https://dependencywatch.io/package/npm/dowload_ebok_frau_holle_die_nordische_gottin_hulle_und_ihr_gef_by_holger_karsten_schmid_1u2dk) | npm | * |
| [dowload_ebok_ho_mangiato_abbastanza_by_giorgio_serafini_prosperi_txkvg](https://dependencywatch.io/package/npm/dowload_ebok_ho_mangiato_abbastanza_by_giorgio_serafini_prosperi_txkvg) | npm | * |
| [dowload_ebok_la_historia_universal_en_100_preguntas_by_luis_e_inigo_fernandez_0w097](https://dependencywatch.io/package/npm/dowload_ebok_la_historia_universal_en_100_preguntas_by_luis_e_inigo_fernandez_0w097) | npm | * |
| [dowload_ebok_la_ternura_de_dios_by_papa_francisco_kq4hn](https://dependencywatch.io/package/npm/dowload_ebok_la_ternura_de_dios_by_papa_francisco_kq4hn) | npm | * |
| [dowload_ebok_mein_fur_immer_by_b_h_bartsch_jjche](https://dependencywatch.io/package/npm/dowload_ebok_mein_fur_immer_by_b_h_bartsch_jjche) | npm | * |
| [dowload_ebok_pickleball_cpr_coaching_pickleball_readiness_by_claudia_a_fontana_30268](https://dependencywatch.io/package/npm/dowload_ebok_pickleball_cpr_coaching_pickleball_readiness_by_claudia_a_fontana_30268) | npm | * |
| [dowload_ebok_ulysse_by_james_joyce_2tbxz](https://dependencywatch.io/package/npm/dowload_ebok_ulysse_by_james_joyce_2tbxz) | npm | * |
| [foxxy-baileys](https://dependencywatch.io/package/npm/foxxy-baileys) | npm | * |
| [gifted-baileys](https://dependencywatch.io/package/npm/gifted-baileys) | npm | * |
| [gupongxyz](https://dependencywatch.io/package/npm/gupongxyz) | npm | * |
| [hiura](https://dependencywatch.io/package/npm/hiura) | npm | * |
| [kube-health-tools](https://dependencywatch.io/package/npm/kube-health-tools) | npm | 1.0.0, 1.0.1, 1.0.3, 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4 |
| [leveldb-edit](https://dependencywatch.io/package/npm/leveldb-edit) | npm | * |
| [lilgabriel-baileys](https://dependencywatch.io/package/npm/lilgabriel-baileys) | npm | * |
| [makamesco-baileys](https://dependencywatch.io/package/npm/makamesco-baileys) | npm | * |
| [malvin-baileys](https://dependencywatch.io/package/npm/malvin-baileys) | npm | * |
| [malvin-wa](https://dependencywatch.io/package/npm/malvin-wa) | npm | * |
| [mod-baileys](https://dependencywatch.io/package/npm/mod-baileys) | npm | * |
| [moltbook-api-helper](https://dependencywatch.io/package/npm/moltbook-api-helper) | npm | * |
| [moltbook-health](https://dependencywatch.io/package/npm/moltbook-health) | npm | * |
| [mrxd-baileys](https://dependencywatch.io/package/npm/mrxd-baileys) | npm | * |
| [ms-nicky-baileys](https://dependencywatch.io/package/npm/ms-nicky-baileys) | npm | * |
| [mybotthisoneis](https://dependencywatch.io/package/npm/mybotthisoneis) | npm | * |
| [nobiztoblut-bot](https://dependencywatch.io/package/npm/nobiztoblut-bot) | npm | * |
| [nodecheck-health](https://dependencywatch.io/package/npm/nodecheck-health) | npm | * |
| [npm-scanner](https://dependencywatch.io/package/npm/npm-scanner) | npm | * |
| [nrx-bails](https://dependencywatch.io/package/npm/nrx-bails) | npm | * |
| [nyttt-baileys](https://dependencywatch.io/package/npm/nyttt-baileys) | npm | * |
| [phantom-pro](https://dependencywatch.io/package/npm/phantom-pro) | npm | * |
| [popkid-baileys](https://dependencywatch.io/package/npm/popkid-baileys) | npm | * |
| [ravionbailey](https://dependencywatch.io/package/npm/ravionbailey) | npm | * |
| [reyz4you-baileys-v1](https://dependencywatch.io/package/npm/reyz4you-baileys-v1) | npm | * |
| [rfn-baileys](https://dependencywatch.io/package/npm/rfn-baileys) | npm | * |
| [shadowmd-baileys](https://dependencywatch.io/package/npm/shadowmd-baileys) | npm | * |
| [shanks](https://dependencywatch.io/package/pypi/shanks) | PyPI | 0.0.4 |
| [shin-yagami](https://dependencywatch.io/package/npm/shin-yagami) | npm | * |
| [silva-baileys](https://dependencywatch.io/package/npm/silva-baileys) | npm | * |
| [skylerss](https://dependencywatch.io/package/npm/skylerss) | npm | * |
| [supun-baileyz](https://dependencywatch.io/package/npm/supun-baileyz) | npm | * |
| [surabails](https://dependencywatch.io/package/npm/surabails) | npm | * |
| [tr4shxsuit](https://dependencywatch.io/package/npm/tr4shxsuit) | npm | * |
| [turbo-baileys](https://dependencywatch.io/package/npm/turbo-baileys) | npm | * |
| [ultramaxo-baileys](https://dependencywatch.io/package/npm/ultramaxo-baileys) | npm | * |
| [vanzdev](https://dependencywatch.io/package/npm/vanzdev) | npm | * |
| [vendetazuu-baileys](https://dependencywatch.io/package/npm/vendetazuu-baileys) | npm | * |
| [vendettazuu-baileys](https://dependencywatch.io/package/npm/vendettazuu-baileys) | npm | * |
| [vendezuubaileys](https://dependencywatch.io/package/npm/vendezuubaileys) | npm | * |
| [venzuu-baileys](https://dependencywatch.io/package/npm/venzuu-baileys) | npm | * |
| [vinzz-baileys](https://dependencywatch.io/package/npm/vinzz-baileys) | npm | * |
| [vinzzknight](https://dependencywatch.io/package/npm/vinzzknight) | npm | * |
| [vinzzxd](https://dependencywatch.io/package/npm/vinzzxd) | npm | * |
| [vlyzer-baileys](https://dependencywatch.io/package/npm/vlyzer-baileys) | npm | * |
| [wertybailz](https://dependencywatch.io/package/npm/wertybailz) | npm | * |
| [wileys-neji](https://dependencywatch.io/package/npm/wileys-neji) | npm | * |
| [wizeza-baileys](https://dependencywatch.io/package/npm/wizeza-baileys) | npm | * |
| [xnxx-bail-pro](https://dependencywatch.io/package/npm/xnxx-bail-pro) | npm | * |
| [xprov2baileystest](https://dependencywatch.io/package/npm/xprov2baileystest) | npm | * |
| [yagami-bail](https://dependencywatch.io/package/npm/yagami-bail) | npm | * |
| [yagami-baileys](https://dependencywatch.io/package/npm/yagami-baileys) | npm | * |
| [yantobail](https://dependencywatch.io/package/npm/yantobail) | npm | * |
| [yazxz](https://dependencywatch.io/package/npm/yazxz) | npm | * |
| [yukistage](https://dependencywatch.io/package/npm/yukistage) | npm | * |
| [yuliawhh](https://dependencywatch.io/package/npm/yuliawhh) | npm | * |
| [yuuki-baileys](https://dependencywatch.io/package/npm/yuuki-baileys) | npm | * |
| [zakkixd1](https://dependencywatch.io/package/npm/zakkixd1) | npm | * |
| [zenvy-baileys](https://dependencywatch.io/package/npm/zenvy-baileys) | npm | * |
| [zenvyflump](https://dependencywatch.io/package/npm/zenvyflump) | npm | * |
| [zexxo-baileys](https://dependencywatch.io/package/npm/zexxo-baileys) | npm | * |
| [zhenbaileys](https://dependencywatch.io/package/npm/zhenbaileys) | npm | * |
| [zyleys](https://dependencywatch.io/package/npm/zyleys) | npm | * |

## What happened

GitHub published malware advisories for over 270 packages on 10 November 2026. The vast majority are a coordinated flood of Baileys WhatsApp library forks. Severity is `medium` because no package in this sweep has a published analysis confirming a payload beyond the standard CWE-506 boilerplate.

The Baileys flood (Cluster A) published approximately 250 npm packages, all variations on the Baileys WhatsApp Web API library name. None had published analysis beyond the standard "treat host as fully compromised" takedown notice.

Ten scoped npm packages (Cluster B) appear to target internal registries at financial and telecom companies including PostEx, Telefonica, ING Bank, Futurae (an authentication provider), and Fidelity Investments (FMR). All are CWE-506 boilerplate with no confirmed payload.

The `strutil-core` RubyGems worm (GHSA-gv9w-h836-5f8g) also received its GitHub advisory today, but it is tracked in the named pystr-codec Miasma worm incident rather than this sweep.

## Impact

- **Cluster A: Baileys WhatsApp library fork flood (malicious-package; CWE-506 boilerplate, no published analysis) (~250 npm packages)**: Massive burst of packages with names containing "baileys", "bail", or related strings (e.g. `zenvy-baileys`, `turbo-baileys`, `@baileys-md/baileys`, `@hanzzyy/baileys`). All received standard CWE-506 takedown notices with no published analysis of the payload. Representative GHSA IDs: GHSA-xcrr-68m7-3c73, GHSA-6wxx-wg3c-9j4r, GHSA-fmcg-cw36-2rvf. See the full package list below.
- **Cluster B: npm dependency-confusion probes (dependency-confusion; CWE-506 boilerplate, no payload beyond beacon) (10 packages)**: `@postex/common`, `@jm-telefonica/multibrand-components`, `@generic-means/ing-feat-scanner-libs`, `@futurae-public/adaptive-js`, `@fmr-ap149494/apex-base-component`, `@fmr-ap153177/apex-kit-icons`, `@fcsmc/commercial-analytics`, `@factoryz/apollo`, `@openyard/vetcode`, `@conduitops/logview-archive`. Scoped names suggest internal registries at PostEx, Telefonica, ING Bank, Futurae, Fidelity (FMR). All CWE-506 boilerplate with no published analysis.
- **Cluster C: npm CWE-506 boilerplate takedowns (malicious-package; no published analysis) (20+ packages)**: `kube-health-tools` (13 versions), `npm-scanner`, `nodecheck-health`, `moltbook-health`, `moltbook-api-helper`, `leveldb-edit`, and 7 `dowload_ebok_*` ebook-spam lure packages. All received standard takedown notices.
- **Cluster D: PyPI shanks Discord-webhook lure (malicious-package; published analysis) (1 package)**: `shanks` 0.0.4. On import, queries a geolocation service for the host IP and posts IP, city, state, coordinates to a hard-coded Discord webhook. Low-severity lure. MAL-2026-19051.
- **Note**: RubyGems `strutil-core` 1.0.1 (GHSA-gv9w-h836-5f8g, MAL-2026-19054), a Miasma-family worm, also received its GHSA advisory on Nov 10. It is tracked in the named incident [pystr-codec Miasma worm](https://dependencywatch.io/incident/pypi-2026-11-01-pystr-codec-miasma-worm).

## What to do

1. **Check your lockfiles** for every package and version listed below, or upload them to the DependencyWatch scanner
2. **Baileys forks** (Cluster A): if any of these appeared in your lockfile, remove them and rebuild; rotate secrets if the host executed the package
3. **Dep-confusion probes** (Cluster B): uninstall; if installed in CI, review whether internal package or scope names leaked; consider configuring a scoped registry for your organization
4. **CWE-506 boilerplate** (Cluster C): remove and rebuild; rotate secrets if the host ran the package
5. **shanks** (Cluster D): remove; low-severity, no credential theft beyond IP geolocation

## Check your own dependencies

- Check a package-lock.json against this incident: https://dependencywatch.io/check/package-lock-json
- Check a requirements.txt against this incident: https://dependencywatch.io/check/requirements-txt

The scan runs entirely in the browser; lockfile contents are never uploaded.

## References

- [GitHub Advisory Database, malware advisories](https://github.com/advisories?query=type%3Amalware&sort=published-desc) - GitHub
- [GHSA-mj5g-9669-w97f: kube-health-tools (13 versions)](https://github.com/advisories/GHSA-mj5g-9669-w97f) - GitHub
- [GHSA-547v-q874-636x: shanks PyPI Discord-webhook lure](https://github.com/advisories/GHSA-547v-q874-636x) - GitHub
- [GHSA-fq53-vhhm-rqf7: @postex/common dep-confusion probe](https://github.com/advisories/GHSA-fq53-vhhm-rqf7) - GitHub
- [OpenSSF malicious-packages repository](https://github.com/ossf/malicious-packages) - OpenSSF

---

Canonical page: https://dependencywatch.io/incident/multi-2026-11-10-ghsa-malware-sweep
Markdown version: https://dependencywatch.io/incident/multi-2026-11-10-ghsa-malware-sweep.md
Site index for agents: https://dependencywatch.io/llms.txt
DependencyWatch.io is operated by Precursor Security (https://precursorsecurity.com).