registry / @neroxkira/vangal-baileys / 1.0.2

@neroxkira/vangal-baileys@1.0.2

⚠ Under review

WhatsApp API Modification By Vangal

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

GitDependency

scanned 95 file(s), 1.36 MB of source, external domains: faq.whatsapp.com, raw.githubusercontent.com, v.whatsapp.net, web.whatsapp.com

Oversized source lightweight scan

WAProto/index.js8.24 MB file, sampled 256 KB

No sampled risky behavior triggered.

Source & flagged code

4 flagged

package.jsonView file

Lines 22-62json

22 "types": "lib/index.d.ts",

23 "files": [

24 "lib/**/*.js",

25 "lib/**/*.d.ts",

26 "lib/**/*.json",

27 "WAProto/*.js",

28 "WAProto/*.d.ts",

29 "engine-requirements.js"

30 ],

31 "scripts": {

32 "build:all": "tsc && typedoc",

33 "build:docs": "typedoc",

34 "build:tsc": "tsc",

35 "changelog:last": "conventional-changelog -p angular -r 2",

36 "changelog:preview": "conventional-changelog -p angular -u",

37 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

38 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

39 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

40 "prepack": "",

41 "prepare": "",

42 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

43 "release": "release-it",

44 "test": "jest"

45 },

46 "dependencies": {

47 "@adiwajshing/keyed-db": "^0.2.4",

48 "@hapi/boom": "^9.1.3",

49 "@cacheable/node-cache": "^1.4.0",

50 "async-mutex": "^0.5.0",

51 "audio-decode": "^2.1.3",

52 "axios": "^1.3.3",

53 "cache-manager": "4.0.1",

54 "chalk": "^4.1.2",

55 "futoin-hkdf": "^1.5.1",

56 "libphonenumber-js": "^1.10.20",

57 "lodash": "^4.17.21",

58 "libsignal": "^6.0.0",

59 "music-metadata": "^7.12.3",

60 "node-cache": "^5.1.2",

61 "node-fetch": "^2.6.1",

62 "pino": "^7.0.0",

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8642283 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Defaults/baileys-version.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Defaults/baileys-version.jsonView on unpkg

lib/Utils/messages.jsView file

•matchType = normalized_sha256 matchedPackage = kiki-baileys@1.0.2 matchedPath = lib/Utils/messages.js matchedIdentity = npm:a2lraS1iYWlsZXlz:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/Utils/messages.jsView on unpkg

@neroxkira/vangal-baileys@1.0.2

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code