registry / @fhkry/baileys / 0.0.1-security

@fhkry/baileys@0.0.1-security

security holding package

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed attack surface exists in this package version. It is a metadata-only holding package with documentation.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No source-backed malicious action is present.

Mechanism

No executable package behavior.

Rationale

Direct inspection found a non-executable placeholder package only. The README's historical claim does not establish malicious behavior in `@fhkry/baileys@0.0.1-security`.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` states this is a security holding package and references previously removed malicious code.

Evidence against

`package.json` has no lifecycle scripts, entrypoints, dependencies, or executable configuration.
Only `package.json` and `README.md` exist in the extracted package.
No source contains network, filesystem, shell, dynamic-loading, or credential-harvesting behavior.

@fhkry/baileys@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings