registry / @crysnovax/baileys / 2.7.3

@crysnovax/baileys@2.7.3

Premium Baileys fork ⚉ Meta compositing, bot planning replay, welcome flow, rich messages (code, table, LaTeX, reels), interactive messages, albums, and more.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 132 file(s), 2.28 MB of source, external domains: acs.whatsapp.com, api.telegram.org, call.whatsapp.com, github.com, graph.whatsapp.com, stackoverflow.com, web.crysnovax.link, web.whatsapp.com, www.facebook.com, www.whatsapp.com

Oversized source lightweight scan

WAProto/index.js13.8 MB file, sampled 256 KB

ChildProcess

Source & flagged code

9 flagged

package.jsonView file

Lines 1-28json

2 "name": "@crysnovax/baileys",

3 "version": "2.7.3",

4 "description": "Premium Baileys fork ⚉ Meta compositing, bot planning replay, welcome flow, rich messages (code, table, LaTeX, reels), interactive messages, albums, and more.",

5 "main": "lib/index.js",

6 "type": "module",

7 "scripts": {

8 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

9 "test": "node --test"

10 },

11 "engines": {

12 "node": ">=20.0.0"

13 },

14 "repository": {

15 "type": "git",

16 "url": "https://pair.crysnovax.link"

17 },

18 "files": [

19 "lib/**/*",

20 "WAProto/**/*",

21 "engine-requirements.js"

22 ],

23 "keywords": [

24 "automation",

25 "baileys",

26 "baileys-fork",

27 "baileys-mod",

28 "crysnova ai",

lib/WABinary/constants.jsView file

Lines 580-620javascript

580 '044',

581 'mms_cat_v1_forward_hot_override_enabled',

582 'user_notice',

583 'ptt_waveform_send',

584 '047',

585 'Asia/Calcutta',

586

lib/Utils/messages-media.jsView file

Lines 1-21javascript

1import { Boom } from '@hapi/boom';

2import { spawn } from 'child_process';

3import * as Crypto from 'crypto';

High

Child Process

Package source references child process execution.

lib/Utils/messages-media.js

lib/antiban.cjsView file

Lines 1-21javascript

1const __importMetaUrl = require('url').pathToFileURL(__filename).href

2;('use strict')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/antiban.cjsView on unpkg · L1

3var __create = Object.create

lib/Utils/validate-connection.jsView file

Lines 91-131javascript

91 supportBizHostedMsg: true,

92 supportRecentSyncChunkMessageCountTuning: true,

93 supportHostedGroupMsg: true,

94 supportFbidBotChatHistory: true,

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 14456902 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/business.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Utils/business.jsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code