@denzz221/baileys@8.0.5
WhatsApp API Modification By denzz221
AI Security Review
scanned 1h ago · by lpm-firewall-aiThe package automatically uses the connected WhatsApp account to follow a publisher-selected newsletter whenever the message socket is created. This is an unauthorized account action and warrants blocking publication.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Creating the message socket; the follow is attempted after a 90-second timer.
Impact
Uses the user’s WhatsApp account to follow a target the package publisher selected without a user request.
Mechanism
A timer calls the newsletter query with a hard-coded newsletter ID and the FOLLOW action.
Attack narrative
When the normal socket construction path creates a message socket, it also creates the newsletter socket. That socket schedules a follow after 90 seconds and sends a FOLLOW query for the hard-coded newsletter 120363400780200098@newsletter, using the user’s WhatsApp connection without an explicit request.
AI rationale
The package automatically uses the connected WhatsApp account to follow a publisher-selected newsletter whenever the message socket is created. This is an unauthorized account action and warrants blocking publication.
Evidence
lib/Socket/newsletter.jslib/Socket/messages-send.jslib/Socket/index.js
Network endpoints1
WhatsApp service (WABinary.S_WHATSAPP_NET)
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Creating the message socket also creates the newsletter socket.
- The newsletter socket starts a timer that follows the hard-coded newsletter 120363400780200098@newsletter after 90 seconds.
- That follow action is sent as a WhatsApp newsletter query to the WhatsApp service.
Evidence against
- The preinstall script only checks the Node.js major version and exits if it is below 20.
- WhatsApp client and newsletter features are within the package’s stated purpose.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
GitDependency
Oversized source lightweight scan
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgWAProto/index.jsView file
•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 8472622
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/messages-media.jsView file
•matchType = normalized_sha256
matchedPackage = @denzz221/baileys@8.0.8
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:QGRlbnp6MjIxL2JhaWxleXM:8.0.8
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
4 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Similaritylib/Utils/messages.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
MediumNetwork
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @denzz221/baileys@8.0.5.
See all versions of @denzz221/baileys for other recorded verdicts.
- Avoid installing @denzz221/baileys@8.0.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.