@queenanya/baileys@9.7.1: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@queenanya/baileys@9.7.1: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•Remote tarball dependency specs: libsignal@https://registry.npmjs.org/@queenanya/libsignal/-/libsignal-5.0.5.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

600patternName = google_api_key severity = high line = 600 matchedText = 'AIzaSyD...Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

600patternName = google_api_key severity = high line = 600 matchedText = 'AIzaSyD...Lk',

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

lib/addons/templates.jsView file

86} L87: import(json, overwrite = false) { L88: const templates = JSON.parse(json);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/addons/templates.jsView on unpkg · L86

lib/Utils/validate-connection.jsView file

121pull: false, L122: devicePairingData: { L123: buildHash: appVersionBuf, ... L148: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content); L149: let hmacPrefix = Buffer.from([]); L150: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) { ... L172: ]); L173: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg); L174: const identity = createSignalIdentity(lid, accountSignatureKey);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/Utils/validate-connection.jsView on unpkg · L121

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 5065738 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/WABinary/constants.d.tsView file

20patternName = google_api_key severity = high line = 20 matchedText = export d..."]];

High

Secret Pattern

Google API key in lib/WABinary/constants.d.ts

lib/WABinary/constants.d.tsView on unpkg · L20

Source & flagged code

9 flagged

package.jsonView file

Lines 3-59json

3 "type": "module",

4 "version": "9.7.1",

5 "description": "A WebSockets library for interacting with WhatsApp Web",

6 "keywords": [

7 "whatsapp",

8 "automation"

9 ],

10 "homepage": "https://github.com/WhiskeySockets/Baileys/",

11 "repository": {

12 "url": "git@github.com:WhiskeySockets/Baileys.git"

13 },

14 "license": "MIT",

15 "author": "Rajeh Taher",

16 "main": "lib/index.js",

17 "types": "lib/index.d.ts",

18 "files": [

19 "lib/**/*",

20 "WAProto/**/*",

21 "engine-requirements.js"

22 ],

23 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L23

24 "build:all": "npm run build && npm run build:docs",

25 "build:docs": "typedoc",

26 "build": "tsc -P tsconfig.build.json && tsc-esm-fix --tsconfig=tsconfig.build.json --ext=.js",

27 "changelog:last": "conventional-changelog -p angular -r 2",

28 "changelog:preview": "conventional-changelog -p angular -u",

29 "changelog:update": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0",

30 "example": "tsx ./Example/example.ts",

31 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

32 "format": "prettier --write \"src/**/*.{ts,js,json,md}\"",

33 "formattt": "prettier --write .",

34 "formatt": "prettier --write *",

35 "lint": "tsc && eslint src --ext .js,.ts",

36 "lint:fix": "npm run format && npm run lint -- --fix",

37 "prepack": "npm run build",

38 "prepare": "npm run build",

39 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "release": "release-it",

41 "test": "node --experimental-vm-modules ./node_modules/.bin/jest --testMatch '**/*.test.ts'",

42 "test:e2e": "NODE_TLS_REJECT_UNAUTHORIZED=0 node --experimental-vm-modules ./node_modules/.bin/jest --runInBand --forceExit --testMatch '**/*.test-e2e.ts'",

43 "update:version": "tsx ./scripts/update-version.ts"

44 },

45 "dependencies": {

46 "@cacheable/node-cache": "^1.5.3",

47 "@hapi/boom": "^9.1.3",

48 "async-mutex": "^0.5.0",

49 "fflate": "^0.8.2",

50 "libsignal": "https://registry.npmjs.org/@queenanya/libsignal/-/libsignal-5.0.5.tgz",

51 "long": "^5.3.2",

52 "lru-cache": "^11.2.6",

53 "music-metadata": "^11.12.3",

54 "p-queue": "^9.1.0",

55 "pino": "^9.6",

56 "protobufjs": "^7.5.6",

57 "qrcode-terminal": "^0.12.0",

58 "whatsapp-rust-bridge": "0.5.5",

59 "ws": "^8.19.0"

lib/WABinary/constants.jsView file

Lines 580-620javascript

580 '044',

581 'mms_cat_v1_forward_hot_override_enabled',

582 'user_notice',

583 'ptt_waveform_send',

584 '047',

585 'Asia/Calcutta',

586

lib/addons/templates.jsView file

Lines 66-106javascript

66 if (defaultValue !== undefined)

67 return defaultValue;

68 return match;

69 });

70 }

71 render(id, data = {}) {

lib/Utils/validate-connection.jsView file

Lines 101-141javascript

101 supportBizHostedMsg: true,

102 supportRecentSyncChunkMessageCountTuning: true,

103 supportHostedGroupMsg: true,

104 supportFbidBotChatHistory: true,

105

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 5065738 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/WABinary/constants.d.tsView file

Lines 1-28typescript

1export declare const TAGS: {

2 LIST_EMPTY: number;

3 DICTIONARY_0: number;

4 DICTIONARY_1: