registry / @musteqeem/baileys / 1.0.1

@musteqeem/baileys@1.0.1

֎ XADON BAILEYS v7.1.0 PREMIUM - Next-generation WhatsApp Web API library. Engineered with enterprise-grade stability, critical newsletter media upload fixes, full interactive message protocol, native album support, and 40+ extended message types. Built f

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Runtime image/video message generation silently adds author-controlled newsletter metadata. The preinstall hook only checks the Node.js version.

Static reason

One or more suspicious static signals were detected.

Trigger

Caller sends an image or video through the library.

Impact

Recipients can receive unsolicited forwarded-newsletter attribution on user media.

Mechanism

unconsented newsletter-attribution injection

Attack narrative

When a consumer uses this library to prepare an image or video message, it unconditionally attaches a newsletter annotation. The annotation defaults are obscured as hex strings and identify a package-controlled newsletter unless the consumer sets override environment variables. This silently changes outbound user content for author promotion; the install hook itself is benign.

Rationale

The package contains concrete, automatic modification of user-generated outbound media for undisclosed author attribution. This is not justified by its WhatsApp client functionality and is intentionally obscured.

Evidence

lib/Utils/messages.jspackage.jsonengine-requirements.js

Decision evidence

public snapshot

AI called this Malicious at 92.0% confidence as Malware with low false-positive risk.

Evidence for block

@musteqeem/baileys@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code