@lordmega/baileys@0.3.40: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@lordmega/baileys@0.3.40: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600 matchedText = 'AIzaSyD...Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

•matchType = token_shingles matchedPackage = @crysnovax/baileys@2.7.12 matchedPath = lib/WABinary/constants.js matchedIdentity = npm:QGNyeXNub3ZheC9iYWlsZXlz:2.7.12 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/WABinary/constants.jsView on unpkg

600patternName = google_api_key severity = high line = 600 matchedText = 'AIzaSyD...Lk',

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

lib/Utils/validate-connection.jsView file

114pull: false, L115: devicePairingData: { L116: buildHash: appVersionBuf, ... L141: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content); L142: let hmacPrefix = Buffer.from([]); L143: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) { ... L165: ]); L166: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg); L167: const identity = createSignalIdentity(lid, accountSignatureKey);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/Utils/validate-connection.jsView on unpkg · L114

lib/Utils/messages.jsView file

1const _0x4c4914=_0x4432;(function(_0x570432,_0xbf376d){const _0x1ab300=_0x4432,_0x44c28a=_0x570432();while(!![]){try{const _0x26cac9=-parseInt(_0x1ab300(0x24b))/0x1*(-parseInt(_0x1...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

lib/Utils/messages.jsView on unpkg · L1

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 5329879 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/business.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Utils/business.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "@lordmega/baileys",

3 "version": "0.3.40",

4 "description": "Enhanced Baileys v7 with fixes for newsletter media uploads, plus support for interactive messages, albums, and additional message types.",

5 "main": "lib/index.js",

6 "types": "lib/index.d.ts",

7 "type": "module",

8 "exports": {

9 ".": {

10 "types": "./lib/index.d.ts",

11 "import": "./lib/index.js",

12 "default": "./lib/index.js"

13 },

14 "./lib/*": "./lib/*",

15 "./WAProto": "./WAProto/index.js",

16 "./WAProto/*": "./WAProto/*",

17 "./package.json": "./package.json"

18 },

19 "scripts": {

20 "preinstall": "node ./engine-requirements.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

21 },

22 "engines": {

23 "node": ">=20.0.0"

24 },

25 "repository": {

26 "type": "git",

27 "url": "git+https://github.com/LORDMEGA-MD/baileys.git"

28 },

29 "files": [

30 "lib/**/*",

31 "WAProto/**/*",

32 "engine-requirements.js"

33 ],

34 "keywords": [

35 "automation",

36 "baileys",

37 "baileys-fork",

38 "baileys-mod",

39 "bot",

40 "interactive-messages",

lib/WABinary/constants.jsView file

Lines 580-620javascript

580 '044',

581 'mms_cat_v1_forward_hot_override_enabled',

582 'user_notice',

583 'ptt_waveform_send',

584 '047',

585 'Asia/Calcutta',

586

lib/Utils/validate-connection.jsView file

Lines 94-134javascript

94 supportBizHostedMsg: true,

95 supportRecentSyncChunkMessageCountTuning: true,

96 supportHostedGroupMsg: true,

97 supportFbidBotChatHistory: true,

98

lib/Utils/messages.jsView file

Lines 1-2javascript

1const _0x4c4914=_0x4432;(function(_0x570432,_0xbf376d){const _0x1ab300=_0x4432,_0x44c28a=_0x570432();while(!![]){try{const _0x26cac9

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 5329879 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/business.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Utils/business.jsView on unpkg