@prototypevip/baileys@0.1.2
Baileys fork (@prototypevip/baileys) — clean, without anti-ban, group encryption disabled (like 0.0.8)
This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource inspection found a concrete runtime command-injection flaw but not evidence that the package intentionally performs install-time theft, persistence, or remote payload execution. The automatic lifecycle hook is limited to a Node-version check.
Decision evidence
public snapshot- An automatic preinstall hook runs during installation.
- The video-thumbnail helper interpolates its path argument into a shell command passed to child_process.exec; a caller-controlled path can inject shell syntax.
- The AI formatter extracts exec, commands, group, and db payloads from response text, creating a risky downstream command-dispatch interface.
- The preinstall target only checks the installed Node.js major version and exits when it is below 20.
- No in-package consumer of the extracted AI action blocks was found, so the formatter does not itself execute them.
- The observed HTTP upload and download routines are media-transfer helpers driven by caller-provided URLs.
Source & flagged code
9 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
Affected versions and remediation
This report applies to @prototypevip/baileys@0.1.2.
See all versions of @prototypevip/baileys for other recorded verdicts.
- Review the evidence and your use of @prototypevip/baileys@0.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.