@crysnovax/baileys
Production-ready Baileys fork ⚉ with AI groups, Meta AI prompting, safe compositing fallbacks, rich responses, interactive messages, albums, newsletters, and communities — without antiban wrappers.
This report shows the evidence for @crysnovax/baileys@2.7.19. 17 of 20 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package performs concealed, unconsented external account mutation on every authenticated connection and combines it with vendor fingerprinting and remote feature revocation. The lifecycle hook itself is limited, but the runtime behavior is concrete and malicious.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A consumer creates and opens an authenticated WhatsApp socket.
Impact
The package changes the consumer's external WhatsApp account subscriptions and permits vendor-side tracking and remote feature control.
Mechanism
Obfuscated automatic newsletter subscription plus remote device attestation and feature revocation.
Attack narrative
After an authenticated WhatsApp connection opens, the package invokes an obfuscated helper that follows hard-coded newsletters through a join query and records completion in credentials. In the same connection handler it sends a fingerprint derived from host and CPU details, package name, and version to the vendor attestation service. The vendor can mark the installation revoked or rebranded, which disables features. These actions are not required for normal socket operation and occur without a consumer opt-in.
AI rationale
The package performs concealed, unconsented external account mutation on every authenticated connection and combines it with vendor fingerprinting and remote feature revocation. The lifecycle hook itself is limited, but the runtime behavior is concrete and malicious.
Evidence
package.jsonengine-requirements.jslib/Socket/socket.jslib/Utils/channel-policy.jslib/Utils/integrity.jsLICENSE
Network endpoints2
bailey.crysnovax.linkweb.whatsapp.com
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- Every authenticated socket connection automatically follows package-selected newsletter channels.
- The channel-following policy is deliberately obfuscated and includes a hard-coded newsletter identifier.
- Runtime code fingerprints the host and sends it with package identity to a vendor endpoint.
- A vendor response can remotely revoke the installation and disable features.
Evidence against
- The preinstall hook only checks Node version and reads this package's manifest.
- The attestation request shown in source sends package name, version, and a truncated hash; no secret-file harvesting is present in the inspected code.
- The ffmpeg child process is a parameterized media-thumbnail helper.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
WAProto/index.js13.8 MB file, sampled 256 KB
ChildProcess
Source & flagged code
14 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
matchedText = 'AIzaSyD...Lk',
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600•matchType = normalized_sha256
matchedPackage = @crysnovax/baileys@2.7.15
matchedPath = lib/WABinary/constants.js
matchedIdentity = npm:QGNyeXNub3ZheC9iYWlsZXlz:2.7.15
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/WABinary/constants.jsView on unpkg600patternName = google_api_key
severity = high
line = 600
matchedText = 'AIzaSyD...Lk',
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/Utils/messages-media.jsView file
1import { Boom } from '@hapi/boom';
L2: import { spawn } from 'child_process';
L3: import * as Crypto from 'crypto';
High
Child Process
Package source references child process execution.
lib/Utils/messages-media.jsView on unpkg · L11import { Boom } from '@hapi/boom';
L2: import { spawn } from 'child_process';
L3: import * as Crypto from 'crypto';
...
L55: hasher.update(data);
L56: if (!fileWriteStream.write(data)) {
L57: await once(fileWriteStream, 'drain');
...
L88: if (typeof buffer === 'string') {
L89: buffer = Buffer.from(buffer.replace('data:;base64,', ''), 'base64');
L90: }
...
L115: let buffer = Buffer.alloc(0);
L116: const stderrChunks = [];
L117: ffmpeg.stdout.on('data', (chunk) => {
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
lib/Utils/messages-media.jsView on unpkg · L1•matchType = normalized_sha256
matchedPackage = @crysnovax/baileys@2.7.15
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:QGNyeXNub3ZheC9iYWlsZXlz:2.7.15
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages-media.jsView on unpkglib/Utils/validate-connection.jsView file
111pull: false,
L112: devicePairingData: {
L113: buildHash: appVersionBuf,
...
L138: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content);
L139: let hmacPrefix = Buffer.from([]);
L140: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) {
...
L162: ]);
L163: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg);
L164: const identity = createSignalIdentity(lid, accountSignatureKey);
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L111lib/Utils/channel-policy.jsView file
1const _0x5dbd5a=_0x4193;(function(_0x397f60,_0x361fcf){const _0x9cf7fd=_0x4193,_0x4bb7c2=_0x397f60();while(!![]){try{const _0x27969f=-parseInt(_0x9cf7fd(0x148))/0x1*(parseInt(_0x9c...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
lib/Utils/channel-policy.jsView on unpkg · L1lib/Utils/integrity.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @crysnovax/baileys@2.7.3
matchedIdentity = npm:QGNyeXNub3ZheC9iYWlsZXlz:2.7.3
similarity = 0.858
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/Utils/integrity.jsView on unpkg41const nodeRequire = createRequire(import.meta.url);
L42: const decode = b64 => Buffer.from(b64, 'base64').toString('utf8');
L43:
...
L49: author: 'Y3J5c25vdmF4',
L50: // https://web.crysnovax.link
L51: site: '[redacted]=',
...
L65: /** Developer escape hatch — set to '1' while actively editing the package. */
L66: export const isTrustMode = () => process.env.CRYSNOVAX_TRUST_MODE === '1';
L67:
...
L93: try {
L94: // lib/Utils/integrity.js → ../../package.json = package root manifest
L95: manifest = nodeRequire('../../package.json');
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/Utils/integrity.jsView on unpkg · L41•matchType = normalized_sha256
matchedPackage = @crysnovax/baileys@2.7.15
matchedPath = lib/Utils/integrity.js
matchedIdentity = npm:QGNyeXNub3ZheC9iYWlsZXlz:2.7.15
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/integrity.jsView on unpkgWAProto/index.jsView file
•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 14456902
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/business.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/Utils/business.jsView on unpkgFindings
1 Critical13 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltalib/Utils/integrity.js
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighChild Processlib/Utils/messages-media.js
HighShell
HighCommand Output Exfiltrationlib/Utils/messages-media.js
HighObfuscated Payload Loaderlib/Utils/channel-policy.js
HighBase64 Obscured Urllib/Utils/integrity.js
HighObfuscated
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/integrity.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Similaritylib/WABinary/constants.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @crysnovax/baileys@2.7.19.
The versions list below shows the verdict for each recorded version.
- Avoid installing @crysnovax/baileys@2.7.19. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
20 known versions0.0.1-securitylatestClean—AllowPublishedSep 4, 2026, 1:14 PM2.8.3MaliciousMalwareBlockPublishedAug 30, 2026, 2:19 PM2.8.2MaliciousMalwareBlockPublishedAug 30, 2026, 1:27 PM2.8.1MaliciousMalwareBlockPublishedAug 30, 2026, 1:07 PM2.8.0MaliciousMalwareBlockPublishedAug 30, 2026, 11:46 AM2.7.21MaliciousMalwareBlockPublishedAug 30, 2026, 10:22 AM2.7.20MaliciousMalwareBlockPublishedAug 30, 2026, 8:53 AM2.7.19shownMaliciousMalwareBlockPublishedAug 29, 2026, 10:00 PM2.7.18MaliciousMalwareBlockPublishedAug 26, 2026, 12:10 PM2.7.17MaliciousMalwareBlockPublishedAug 26, 2026, 11:39 AM2.7.16MaliciousMalwareBlockPublishedAug 26, 2026, 10:12 AM2.7.15MaliciousMalwareBlockPublishedAug 25, 2026, 12:46 PM2.7.14MaliciousMalwareBlockPublishedAug 25, 2026, 2:18 AM2.7.13MaliciousPersistenceBlockPublishedAug 23, 2026, 12:29 PM2.7.12MaliciousMalwareBlockPublishedAug 20, 2026, 2:51 PM2.7.11MaliciousMalwareBlockPublishedAug 20, 2026, 10:02 AM2.7.10MaliciousMalwareBlockPublishedAug 16, 2026, 8:30 PM2.7.6MaliciousMalwareBlockPublishedAug 16, 2026, 3:44 PM2.7.3Suspicious—WarnPublishedAug 11, 2026, 11:49 PM2.7.2Suspicious—WarnPublishedAug 11, 2026, 11:14 PM