@prototypevip/baileys@0.0.7: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@prototypevip/baileys@0.0.7: Suspicious npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600 matchedText = "AIzaSyD...Lk",

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600 matchedText = "AIzaSyD...Lk",

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

lib/AntiBan/proxyRotator.jsView file

22// to new Function is a static literal — not user-controlled. L23: function lazyRequire(moduleName) { L24: if (typeof require !== 'undefined') {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/AntiBan/proxyRotator.jsView on unpkg · L22

19// Load optional peer dependencies synchronously in both ESM and CJS builds. L20: // CJS: native require is available. ESM: new Function() reads import.meta.url L21: // without causing TypeScript parse errors in CJS compilation. The string passed

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/AntiBan/proxyRotator.jsView on unpkg · L19

lib/Utils/validate-connection.jsView file

123pull: false, L124: devicePairingData: { L125: buildHash: appVersionBuf, ... L159: proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content); L160: let hmacPrefix = Buffer.from([]); L161: if ( ... L198: ]); L199: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg); L200: const identity = createSignalIdentity(lid, accountSignatureKey);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/Utils/validate-connection.jsView on unpkg · L123

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 4439886 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/AntiBan/credsSnapshot.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/AntiBan/credsSnapshot.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@prototypevip/baileys",

3 "version": "0.0.7",

4 "description": "Baileys fork with optional integrated anti-ban protection (rate limiting, warm-up, health monitoring, human-like messaging)",

5 "main": "lib/index.js",

6 "type": "module",

7 "scripts": {

8 "preinstall": "node ./engine-requirements.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

9 },

10 "publishConfig": {

11 "access": "public"

12 },

13 "engines": {

14 "node": ">=20.0.0"

15 },

16 "repository": {

17 "type": "git",

18 "url": "git+https://github.com/GSK-F/baileys.git"

19 },

20 "files": [

21 "lib/**/*",

22 "WAProto/**/*",

23 "engine-requirements.js"

24 ],

25 "keywords": [

26 "automation",

27 "baileys",

28 "baileys-fork",

lib/WABinary/constants.jsView file

Lines 580-620javascript

580 "044",

581 "mms_cat_v1_forward_hot_override_enabled",

582 "user_notice",

583 "ptt_waveform_send",

584 "047",

585 "Asia/Calcutta",

586

lib/AntiBan/proxyRotator.jsView file

Lines 1-42javascript

1/**

2 * Proxy Rotation — Native proxy injection for Baileys with health tracking

3 *

4 * WhatsApp's ban detection includes IP reputation scoring. Datacenter IPs (VPS)

5 * are flagged, while residential/4G proxies stay alive. No Baileys library handles

6 * native proxy injection — every implementation is DIY hacks. We close that gap.

7 *

8 * Features:

9 * - Multi-strategy rotation (round-robin, random, LRU, weighted)

10 * - Auto-failover on endpoint failure

lib/Utils/validate-connection.jsView file

Lines 103-143javascript

103 recentSyncDaysLimit: undefined,

104 supportCallLogHistory: false,

105 supportBotUserAgentChatHistory: true,

106 supportCagReactionsAndPolls: true,

107

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 4439886 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/AntiBan/credsSnapshot.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/AntiBan/credsSnapshot.jsView on unpkg