@bil-rgb/baileys@1.0.0
A WebSockets library for interacting with WhatsApp Web — bil-rgb fork of Baileys
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package automatically uses the user's WhatsApp account to follow a hard-coded publisher-selected newsletter during ordinary socket setup. This is an unrequested account action and meets the malicious account-action rule.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A caller creates the standard WhatsApp socket; the follow runs automatically after 150 seconds.
Impact
The user's WhatsApp account follows a channel chosen by the package publisher without an explicit user request.
Mechanism
The newsletter socket decodes a hard-coded newsletter ID and sends a WhatsApp FOLLOW query using the socket's query function.
Attack narrative
When the standard socket is created, its constructor chain creates the newsletter socket. That socket waits 150 seconds, decodes a hard-coded newsletter ID, and sends a FOLLOW request through the authenticated WhatsApp connection, causing the account to follow a publisher-selected channel without the user's request.
AI rationale
The package automatically uses the user's WhatsApp account to follow a hard-coded publisher-selected newsletter during ordinary socket setup. This is an unrequested account action and meets the malicious account-action rule.
Evidence
lib/Socket/newsletter.jslib/Socket/username.jslib/Socket/messages-send.jslib/Socket/index.js
Network endpoints1
@s.whatsapp.net
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The newsletter socket contains a fixed, base64-encoded newsletter ID and schedules a FOLLOW request for it.
- Creating the standard socket reaches the username socket, which creates the newsletter socket; this does not require a separate follow command.
- The follow request is sent through WhatsApp's service query and runs after a 150-second delay.
- The preinstall script only checks the Node.js major version.
Evidence against
- The package describes itself as a WhatsApp Web library, so WhatsApp network activity is expected.
- The lifecycle hook exits on Node versions below 20 and does not collect or transmit data.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
6 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @bil-rgb/baileys@1.0.0.
See all versions of @bil-rgb/baileys for other recorded verdicts.
- Avoid installing @bil-rgb/baileys@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.