
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@dreamguyxeon/baileyx
Advanced tools
Welcome to dgxeon-baileys – my ultra-personalized, heavily tweaked version of the famous Baileys WhatsApp Web socket library (powered by WhiskeySockets vibes).
This is not your regular Baileys.
This is Whiskey Socket Baileys – extra smooth, extra strong, custom-blended just the way I like it. Think Baileys Irish Cream + a shot of premium whiskey... but for code. 🔥
This customized Baileys / dgxeon-baileys is exclusively for @dgxeon13 usage only.
Not for public distribution. Not for sharing. Not for others to use or fork.
My private playground, my rules. Hands off. 😈
Because regular Baileys is smooth... but mine has that extra kick.
One sip (or one connect) and you're hooked. 🥃
No npm install. No repo clone for you.
This bottle stays in my bar.
If you're seeing this – consider yourself lucky to even peek at the label.
Made with ❤️ (and a bit of chaos) by @dgxeon13
Stay tuned on my channels for more madness.
Cheers! 🥂
FAQs
security holding package
The npm package @dreamguyxeon/baileyx receives a total of 102 weekly downloads. As such, @dreamguyxeon/baileyx popularity was classified as not popular.
We found that @dreamguyxeon/baileyx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.