registry / @ayunlove/bails / 2.4.5

@ayunlove/bails@2.4.5

WhatsApp Modified By AYUN/OTA — Complete Baileys API with GraphQL, Privacy, Interop, Username support

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 113 file(s), 1.47 MB of source, external domains: acs.whatsapp.com, call.whatsapp.com, graph.whatsapp.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.whatsapp.com

Oversized source lightweight scan

WAProto/index.js2.58 MB file, sampled 256 KB

ChildProcessMinified

Source & flagged code

6 flagged

package.jsonView file

Lines 18-58json

18 "author": "Orang Biasa",

19 "main": "lib/index.js",

20 "types": "lib/index.d.ts",

21 "files": [

22 "lib/**/*",

23 "WAProto/**/*",

24 "engine-requirements.js",

25 "scripts/patch-deps.js"

26 ],

27 "scripts": {

28 "build:all": "echo skip",

29 "build:docs": "echo skip",

30 "build": "echo skip",

31 "changelog:last": "conventional-changelog -p angular -r 2",

32 "changelog:preview": "conventional-changelog -p angular -u",

33 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

34 "lint": "echo skip",

35 "lint:fix": "echo skip",

36 "prepack": "",

37 "prepare": "",

38 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 "postinstall": "node ./scripts/patch-deps.js",

40 "release": "release-it",

41 "test": "echo skip"

42 },

43 "dependencies": {

44 "@adiwajshing/keyed-db": "^0.2.4",

45 "@cacheable/node-cache": "^1.4.0",

46 "@hapi/boom": "^9.1.3",

47 "async-mutex": "^0.5.0",

48 "cache-manager": "^7.2.8",

49 "chalk": "^4.1.2",

50 "crypto-js": "^4.2.0",

51 "jimp": "^1.6.1",

52 "libsignal": "npm:@otaxayun/libsignal-node@latest",

53 "lru-cache": "^11.1.0",

54 "music-metadata": "^11.12.3",

55 "p-queue": "^9.0.0",

56 "pino": "^9.6",

57 "protobufjs": "^7.5.6",

58 "whatsapp-rust-bridge": "0.5.4",

lib/WABinary/constants.jsView file

Lines 6-42javascript

6exports.TOKEN_MAP = exports.TAGS = exports.SINGLE_BYTE_TOKENS = exports.DOUBLE_BYTE_TOKENS = void 0;

7const TAGS = exports.TAGS = {

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 2702199 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

lib/WABinary/constants.d.tsView file

Lines 1-28typescript

1export declare const TAGS: {

2 LIST_EMPTY: number;

3 DICTIONARY_0: number;

4 DICTIONARY_1: number;

5 DICTIONARY_2: number;

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

26patternName = google_api_key severity = high line = 26 matchedText = const DO...']];

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L26

26patternName = google_api_key severity = high line = 26 matchedText = const DO...']];

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L26

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 2702199 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

lib/WABinary/constants.d.tsView file

20patternName = google_api_key severity = high line = 20 matchedText = export d..."]];

High

Secret Pattern

Google API key in lib/WABinary/constants.d.ts

lib/WABinary/constants.d.tsView on unpkg · L20

Findings

5 High3 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretlib/WABinary/constants.js

HighOversized Source FileWAProto/index.js

HighSecret Patternlib/WABinary/constants.js

HighSecret Patternlib/WABinary/constants.d.ts

MediumNetwork

MediumShips Build HelperWAProto/GenerateStatics.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

package.jsonView file

Lines 18-58json

18 "author": "Orang Biasa",

19 "main": "lib/index.js",

20 "types": "lib/index.d.ts",

21 "files": [

22 "lib/**/*",

23 "WAProto/**/*",

24 "engine-requirements.js",

25 "scripts/patch-deps.js"

26 ],

27 "scripts": {

28 "build:all": "echo skip",

29 "build:docs": "echo skip",

30 "build": "echo skip",

31 "changelog:last": "conventional-changelog -p angular -r 2",

32 "changelog:preview": "conventional-changelog -p angular -u",

33 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

34 "lint": "echo skip",

35 "lint:fix": "echo skip",

36 "prepack": "",

37 "prepare": "",

38 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 "postinstall": "node ./scripts/patch-deps.js",

40 "release": "release-it",

41 "test": "echo skip"

42 },

43 "dependencies": {

44 "@adiwajshing/keyed-db": "^0.2.4",

45 "@cacheable/node-cache": "^1.4.0",

46 "@hapi/boom": "^9.1.3",

47 "async-mutex": "^0.5.0",

48 "cache-manager": "^7.2.8",

49 "chalk": "^4.1.2",

50 "crypto-js": "^4.2.0",

51 "jimp": "^1.6.1",

52 "libsignal": "npm:@otaxayun/libsignal-node@latest",

53 "lru-cache": "^11.1.0",

54 "music-metadata": "^11.12.3",

55 "p-queue": "^9.0.0",

56 "pino": "^9.6",

57 "protobufjs": "^7.5.6",

58 "whatsapp-rust-bridge": "0.5.4",

lib/WABinary/constants.jsView file

Lines 6-42javascript

6exports.TOKEN_MAP = exports.TAGS = exports.SINGLE_BYTE_TOKENS = exports.DOUBLE_BYTE_TOKENS = void 0;

7const TAGS = exports.TAGS = {

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 2702199 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

lib/WABinary/constants.d.tsView file

Lines 1-28typescript

1export declare const TAGS: {

2 LIST_EMPTY: number;

3 DICTIONARY_0: number;

4 DICTIONARY_1: number;

5 DICTIONARY_2: number;