Loading npm security reports…
Advanced WhatsApp Web API built on Baileys — interactive messages, buttons, carousels, products, events, payments, polls, albums, sticker packs and more.
Static analysis completed at 72.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L620Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L620Package source references dynamic require/import behavior.
lib/Utils/use-multi-file-auth-state.jsView on unpkg · L188Package source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L98A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
WAProto/parser.js#virtual:normalized:round1View on unpkgThis report applies to @nexustechpro/baileys@3.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L620Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L620Package source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L98A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
WAProto/parser.js#virtual:normalized:round1View on unpkgPackage source references dynamic require/import behavior.
lib/Utils/use-multi-file-auth-state.jsView on unpkg · L188