registry / @nexustechpro/baileys / 2.2.4

@nexustechpro/baileys@2.2.4

Advanced WhatsApp Web API built on Baileys — interactive messages, buttons, carousels, products, events, payments, polls, albums, sticker packs and more.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

WildcardDependency

scanned 102 file(s), 2.06 MB of source, external domains: call.whatsapp.com, google.com, graph.whatsapp.com, mmg.whatsapp.net, raw.githubusercontent.com, v.whatsapp.net, wa.me, web.whatsapp.com, www.whatsapp.com

Oversized source lightweight scan

WAProto/index.js4.23 MB file, sampled 256 KB

ChildProcess

Source & flagged code

7 flagged

package.jsonView file

Lines 66-106json

66 "url": "git+https://github.com/nexustechpro2/baileys.git"

67 },

68 "license": "MIT",

69 "author": "nexustechpro2",

70 "main": "lib/index.js",

71 "types": "lib/index.d.ts",

72 "scripts": {

73 "build:all": "tsc && typedoc",

74 "build:docs": "typedoc",

75 "build:tsc": "tsc",

76 "generate:license": "npx license",

77 "changelog:last": "conventional-changelog -p angular -r 2",

78 "changelog:preview": "conventional-changelog -p angular -u",

79 "changelog:update": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0",

80 "example": "node --inspect -r ts-node/register Example/example.ts",

81 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

82 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

83 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

84 "prepack": "echo 'NexusTechPro WhatsApp Library'",

85 "prepare": "echo 'NexusTechPro WhatsApp Library'",

86 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L86

87 "release": "release-it",

88 "test": "jest"

89 },

90 "files": [

91 "lib/**/*.js",

92 "lib/**/*.json",

93 "lib/**/*.d.ts",

94 "lib/**/*.map",

95 "WAProto/**/*.js",

96 "WAProto/**/*.json",

97 "WAProto/**/*.d.ts",

98 "WAProto/**/*.sh",

99 "engine-requirements.js"

100 ],

101 "dependencies": {

102 "@adiwajshing/keyed-db": "^0.2.4",

103 "@cacheable/node-cache": "^1.4.0",

104 "@hapi/boom": "^9.1.3",

105 "@keyv/etcd": "^2.1.1",

106 "@keyv/memcache": "^2.0.2",

lib/WABinary/constants.jsView file

Lines 600-640javascript

600 '044',

601 'mms_cat_v1_forward_hot_override_enabled',

602 'user_notice',

603 'ptt_waveform_send',

604 '047',

605 'Asia/Calcutta',

606

lib/Utils/use-multi-file-auth-state.jsView file

Lines 212-252javascript

212}

213

214// Maps our unified collectionName option to each adapter's actual constructor key

215const COLLECTION_OPTION_KEY = {

216 '@keyv/mongo': 'collection',

217 '@keyv/postgres': 'table',

lib/Utils/validate-connection.jsView file

Lines 91-131javascript

91 supportBizHostedMsg: true,

92 supportRecentSyncChunkMessageCountTuning: true,

93 supportHostedGroupMsg: true,

94 supportFbidBotChatHistory: true,

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 4435208 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

@nexustechpro/baileys@2.2.4

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code