@ubedsockets/baileys@1.1.0
@ubedsockets/baileys,baileys untuk bot WhatsApp
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe package performs an unsolicited account action: after socket creation, it automatically follows a hard-coded WhatsApp newsletter using the user’s account. This behavior is unrelated to an explicit request to follow that channel, so the package should be blocked.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The application creates the messages socket; the follow request is scheduled 90 seconds after newsletter socket creation.
Impact
The user’s account follows a channel chosen by the package publisher without an explicit request.
Mechanism
The code decodes a hard-coded newsletter ID and sends a FOLLOW request through the WhatsApp socket query.
Attack narrative
Creating the messages socket constructs the newsletter socket. That socket schedules a follow request 90 seconds later, decoding a hard-coded newsletter identifier and sending a FOLLOW mutation over the user’s WhatsApp connection. This uses the user’s account to follow a publisher-selected channel without an explicit request. The package also automatically reacts with 👍 to incoming newsletter messages when they include a server ID.
AI rationale
The package performs an unsolicited account action: after socket creation, it automatically follows a hard-coded WhatsApp newsletter using the user’s account. This behavior is unrelated to an explicit request to follow that channel, so the package should be blocked.
Evidence
lib/Socket/newsletter.jslib/Socket/messages-send.js
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package is a WhatsApp bot library and has no lifecycle scripts.
- Creating the messages socket creates the newsletter socket.
- The newsletter socket schedules a FOLLOW request to a Base64-encoded, publisher-selected newsletter ID after 90 seconds, without a user request.
- Newsletter updates also trigger automatic 👍 reactions when messages have a server ID.
Evidence against
- The package’s declared purpose is WhatsApp bot automation, and its manifest has no install scripts.
Behavioral surface
ChildProcessCryptoFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
GitDependency
Oversized source lightweight scan
Source & flagged code
6 flaggedlib/WABinary/constants.jsView file
603patternName = google_api_key
severity = high
line = 603
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603603patternName = google_api_key
severity = high
line = 603
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603WAProto/GenerateStatics.shView file
•path = WAProto/GenerateStatics.sh
kind = build_helper
sizeBytes = 301
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgFindings
4 High5 Medium3 Low
HighHigh Secretlib/WABinary/constants.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Similaritylib/Utils/messages.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @ubedsockets/baileys@1.1.0.
See all versions of @ubedsockets/baileys for other recorded verdicts.
- Avoid installing @ubedsockets/baileys@1.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.