Loading npm security reports…
PontaLabs Baileys is a lightweight, modern, and customizable WhatsApp Web API library built on Baileys.
Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L605Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L605Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L298Package source references dynamic require/import behavior.
lib/Types/Message.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/Utils/crypto.jsView on unpkg · L42Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the static scanner size ceiling.
WAProto/HistorySync/HistorySync.jsView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L605Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L605Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the static scanner size ceiling.
WAProto/HistorySync/HistorySync.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L298Package source references dynamic require/import behavior.
lib/Types/Message.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/Utils/crypto.jsView on unpkg · L42