@dcloude/baileys@0.0.9
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
WhatsApp Baileys Library Modification to make it easier for developers to develop for anything
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe default anti-ban wrapper provides a dual-use capability that may help automated messaging evade platform restrictions, so a warning is appropriate. The install hook is a Node.js version check, and the inspected code does not establish a concrete attack.
Decision evidence
public snapshot- The socket enables its aggressive anti-ban wrapper by default, with an option to disable it.
- The wrapper observes connection and message events and applies anti-ban handling.
- The anti-ban defaults limit message rates and add delays, supporting a platform-enforcement-evasion concern.
- The handler invokes the selected command’s execute function with a context object.
- The install hook only checks the Node.js version and exits when it is below the required version.
- Automatic replies are disabled by default. No unrelated credential recipient or confirmed attack was identified.
Source & flagged code
8 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
Affected versions and remediation
This report applies to @dcloude/baileys@0.0.9.
See all versions of @dcloude/baileys for other recorded verdicts.
- Review the evidence and your use of @dcloude/baileys@0.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.