whalibmob 5.25.0
“Node.js library for WhatsApp — register a number over SMS, or link as a companion by QR. Signal E2E encryption, media, groups, channels.”
Converts buffer to hex stringNode calls imported writeFileSync
SHA-2569d96b2bcf548d87b7eed53355611415f19526f85311b5046937d3d8e0fae298e
Also flagged by osv (MAL-2026-17408: Malicious code in whalibmob (npm)) +2 more.