WhatsApp API by RzzTech
Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L605Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L605Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L389Package source references dynamic require/import behavior.
lib/Types/Message.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/Utils/crypto.jsView on unpkg · L42Package contains source files above the static scanner size ceiling.
WAProto/HistorySync/HistorySync.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L39Package contains source files above the static scanner size ceiling.
WAProto/HistorySync/HistorySync.jsView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L605Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L605Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L389Package source references dynamic require/import behavior.
lib/Types/Message.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/Utils/crypto.jsView on unpkg · L42