registry / Malware / @alexiddev/baileys

@alexiddev/baileys

Alex ID DEV Baileys — WhatsApp Web API (based on official Baileys 7.0.0-rc14) with cross-platform buttons, lists and carousels for Android, iOS and Windows

This report shows the evidence for @alexiddev/baileys@1.0.1. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The package performs a publisher-chosen WhatsApp account action by default: it follows a hard-coded newsletter when the socket connects. The README discloses the behavior and provides an opt-out, but the package rules classify default account actions toward publisher-selected targets as malicious.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Creating a socket and then reaching the open connection state; the follow occurs after a delay.

Impact

The user's WhatsApp account is made to follow the publisher's channel without an explicit request for that account action.

Mechanism

The default socket factory attaches a handler that calls `newsletterFollow` for the hard-coded newsletter unless the caller opts out or supplies another target.

Attack narrative

When a socket is created, the package attaches an auto-follow handler. Once the WhatsApp connection opens, it follows the hard-coded publisher newsletter after a delay. The README discloses the behavior and offers an opt-out, but the account action still happens by default using the user's credentials toward a publisher-chosen target.

AI rationale

Evidence

lib/Alex/auto-follow.jslib/Socket/index.jslib/Defaults/index.js

Network endpoints1

web.whatsapp.com

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

The default newsletter target is `120363404367589225@newsletter`.
An unset `autoFollowNewsletter` option resolves to the default target.
The socket factory attaches the auto-follow handler when creating a socket.
After the WhatsApp connection opens, the handler follows the target newsletter.

Evidence against

The README discloses that the package auto-follows the publisher's channel and documents how to disable or change it.
The preinstall script only checks the Node.js major version and exits on versions below 20.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 103 file(s), 1.68 MB of source, external domains: call.whatsapp.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.whatsapp.com

Oversized source lightweight scan

Source & flagged code

8 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

Findings

6 High3 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritylib/Utils/messages-media.js

HighSecret Patternlib/WABinary/constants.js

HighSecret Patternlib/WABinary/constants.d.ts

MediumNetwork

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptolib/Utils/validate-connection.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @alexiddev/baileys@1.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @alexiddev/baileys@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 12:12:08.508Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.0.1latestshownMaliciousMalwareBlockPublishedNov 2, 2026, 8:56 PM 1.0.0MaliciousMalwareBlockPublishedNov 2, 2026, 8:01 PM

registry / Malware / @alexiddev/baileys

@alexiddev/baileys

Alex ID DEV Baileys — WhatsApp Web API (based on official Baileys 7.0.0-rc14) with cross-platform buttons, lists and carousels for Android, iOS and Windows

This report shows the evidence for @alexiddev/baileys@1.0.1. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Creating a socket and then reaching the open connection state; the follow occurs after a delay.

Impact

The user's WhatsApp account is made to follow the publisher's channel without an explicit request for that account action.

Mechanism

The default socket factory attaches a handler that calls `newsletterFollow` for the hard-coded newsletter unless the caller opts out or supplies another target.

Attack narrative

AI rationale

Evidence

lib/Alex/auto-follow.jslib/Socket/index.jslib/Defaults/index.js

Network endpoints1

web.whatsapp.com

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

The default newsletter target is `120363404367589225@newsletter`.
An unset `autoFollowNewsletter` option resolves to the default target.
The socket factory attaches the auto-follow handler when creating a socket.
After the WhatsApp connection opens, the handler follows the target newsletter.

Evidence against

The README discloses that the package auto-follows the publisher's channel and documents how to disable or change it.
The preinstall script only checks the Node.js major version and exits on versions below 20.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 103 file(s), 1.68 MB of source, external domains: call.whatsapp.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.whatsapp.com

Oversized source lightweight scan

Source & flagged code

8 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

Findings

6 High3 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritylib/Utils/messages-media.js

HighSecret Patternlib/WABinary/constants.js

HighSecret Patternlib/WABinary/constants.d.ts

MediumNetwork

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptolib/Utils/validate-connection.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @alexiddev/baileys@1.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @alexiddev/baileys@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 12:12:08.508Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.0.1latestshownMaliciousMalwareBlockPublishedNov 2, 2026, 8:56 PM 1.0.0MaliciousMalwareBlockPublishedNov 2, 2026, 8:01 PM

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages