@dreamguyxeon/baileyx: Malicious npm security report (Block)

Loading npm security reports…

Source & flagged code

3 flagged

package.jsonView file

Lines 19-59json

19 "types": "lib/index.d.ts",

20 "directories": {

21 "lib": "lib"

22 },

23 "files": [

24 "lib/*",

25 "WAProto/*.js",

26 "engine-requirements.js"

27 ],

28 "scripts": {

29 "build:all": "tsc && typedoc",

30 "build:docs": "typedoc",

31 "build:tsc": "tsc",

32 "changelog:last": "conventional-changelog -p angular -r 2",

33 "changelog:preview": "conventional-changelog -p angular -u",

34 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

35 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

36 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

37 "prepack": "",

38 "prepare": "",

39 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "release": "release-it",

41 "test": "jest"

42 },

43 "dependencies": {

44 "@adiwajshing/keyed-db": "^0.2.4",

45 "@hapi/boom": "^9.1.3",

46 "@cacheable/node-cache": "^1.4.0",

47 "async-mutex": "^0.5.0",

48 "audio-decode": "^2.1.3",

49 "axios": "^1.3.3",

50 "cache-manager": "4.0.1",

51 "chalk": "^4.1.2",

52 "futoin-hkdf": "^1.5.1",

53 "libphonenumber-js": "^1.10.20",

54 "lodash": "^4.17.21",

55 "libsignal": "npm:@dgxeon13/libsignal-node@1.0.0",

56 "music-metadata": "^7.12.3",

57 "node-cache": "^5.1.2",

58 "node-fetch": "^2.6.1",

59 "pino": "^7.0.0",

lib/index.jsView file

Lines 1-1javascript

1var __p_1IsQ_cache,__p_BXiS_array,__globalObject,__TextDecoder,__Uint8Array,__Buffer,__String,__Array,utf8ArrayToStr,__p_u0rc_imul,__createBinding,__exportStar,__importDefault;const __p_PBsp_dlrArray=[0x0,0x1,0x8,0xff,"length",0x3f,0x6,"fromCodePoint",0x7,0xc,"undefined"

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8472622 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/index.jsView file

1var __p_1IsQ_cache,__p_BXiS_array,__globalObject,__TextDecoder,__Uint8Array,__Buffer,__String,__Array,utf8ArrayToStr,__p_u0rc_imul,__createBinding,__exportStar,__importDefault;cons...

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L1

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8472622 magicHex = [redacted]

High

@dreamguyxeon/baileyx: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

3 flagged

package.jsonView file

Lines 19-59json

19 "types": "lib/index.d.ts",

20 "directories": {

21 "lib": "lib"

22 },

23 "files": [

24 "lib/*",

25 "WAProto/*.js",

26 "engine-requirements.js"

27 ],

28 "scripts": {

29 "build:all": "tsc && typedoc",

30 "build:docs": "typedoc",

31 "build:tsc": "tsc",

32 "changelog:last": "conventional-changelog -p angular -r 2",

33 "changelog:preview": "conventional-changelog -p angular -u",

34 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

35 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

36 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

37 "prepack": "",

38 "prepare": "",

39 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "release": "release-it",

41 "test": "jest"

42 },

43 "dependencies": {

44 "@adiwajshing/keyed-db": "^0.2.4",

45 "@hapi/boom": "^9.1.3",

46 "@cacheable/node-cache": "^1.4.0",

47 "async-mutex": "^0.5.0",

48 "audio-decode": "^2.1.3",

49 "axios": "^1.3.3",

50 "cache-manager": "4.0.1",

51 "chalk": "^4.1.2",

52 "futoin-hkdf": "^1.5.1",

53 "libphonenumber-js": "^1.10.20",

54 "lodash": "^4.17.21",

55 "libsignal": "npm:@dgxeon13/libsignal-node@1.0.0",

56 "music-metadata": "^7.12.3",

57 "node-cache": "^5.1.2",

58 "node-fetch": "^2.6.1",

59 "pino": "^7.0.0",

lib/index.jsView file

Lines 1-1javascript

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8472622 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

@dreamguyxeon/baileyx@2.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code