registry  /  @gara31/void-baileys  /  3.0.7

@gara31/void-baileys@3.0.7

Modded Baileys v7 — Interactive Messages, AI Rich Response & More

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsUrlStrings
Manifest
GitDependency
scanned 90 file(s), 1.43 MB of source, external domains: call.whatsapp.com, mmg.whatsapp.net, raw.githubusercontent.com, web.whatsapp.com, www.whatsapp.com
Oversized source lightweight scan
WAProto/index.js3.82 MB file, sampled 256 KB
ChildProcessHighEntropyStrings

Source & flagged code

5 flagged · loading source
lib/WABinary/constants.jsView file
600patternName = google_api_key severity = high line = 600 matchedText = "AIzaSyD...Lk",
High
High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600
600patternName = google_api_key severity = high line = 600 matchedText = "AIzaSyD...Lk",
High
Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600
lib/Utils/crypto.jsView file
2createCipheriv, L3: createDecipheriv, L4: createHash, ... L18: return { L19: private: Buffer.from(privKey), L20: // remove version byte
Low
Weak Crypto

Package source references weak cryptographic algorithms.

lib/Utils/crypto.jsView on unpkg · L2
WAProto/index.jsView file
•path = WAProto/index.js kind = oversized_source_file sizeBytes = 4008447 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg
package.jsonView file
•dependencies changed=libsignal
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Findings

1 Critical3 High3 Medium5 Low
CriticalManifest Confusionpackage.json
HighHigh Secretlib/WABinary/constants.js
HighOversized Source FileWAProto/index.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowScripts Present
LowWeak Cryptolib/Utils/crypto.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings