@ubedsockets/baileys@1.6.2
@ubedsockets/baileys,baileys A high-performance WhatsApp Web API wrapper based on Baileys, optimized for bot developers with integrated utility scrapers.
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe normal socket construction path schedules a follow to a hard-coded newsletter, and message retrieval can send automatic reactions. These are unrequested WhatsApp account actions, so this version is malicious.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Calling `makeWASocket()` constructs the newsletter socket; its follow request runs 90 seconds later. Fetching newsletter messages can also trigger reactions.
Impact
Uses the user's authenticated WhatsApp account to perform unrequested account actions toward a publisher-chosen target and on newsletter messages.
Mechanism
`lib/Socket/newsletter.js` decodes a hard-coded newsletter ID and issues a `FOLLOW` query. It also sends a thumbs-up reaction for fetched messages with server IDs.
Attack narrative
When an application creates the package's normal WhatsApp socket, the newsletter layer schedules a follow request for a hard-coded newsletter after 90 seconds. The same layer automatically reacts with a thumbs-up when newsletter messages with server IDs are fetched. These actions use the user's authenticated account without an explicit request.
AI rationale
The normal socket construction path schedules a follow to a hard-coded newsletter, and message retrieval can send automatic reactions. These are unrequested WhatsApp account actions, so this version is malicious.
Evidence
lib/Socket/index.jslib/Socket/messages-send.jslib/Socket/newsletter.js
Network endpoints1
WhatsApp newsletter service via the authenticated socket
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- Creating the normal socket reaches `makeNewsletterSocket`, which schedules a follow request for a hard-coded, base64-encoded newsletter ID after 90 seconds.
- Newsletter message retrieval automatically sends a thumbs-up reaction when a message has a server ID.
- The package manifest defines no lifecycle scripts; the identified account actions are triggered at runtime.
Evidence against
- No credential or file exfiltration was identified in the inspected paths.
- The package is a WhatsApp API wrapper, and the actions use its ordinary authenticated socket.
Behavioral surface
ChildProcessCryptoFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
7 flaggedlib/WABinary/constants.jsView file
603patternName = google_api_key
severity = high
line = 603
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603603patternName = google_api_key
severity = high
line = 603
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603WAProto/GenerateStatics.shView file
•path = WAProto/GenerateStatics.sh
kind = build_helper
sizeBytes = 301
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgFindings
5 High5 Medium3 Low
HighHigh Secretlib/WABinary/constants.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Similaritylib/Utils/messages.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @ubedsockets/baileys@1.6.2.
See all versions of @ubedsockets/baileys for other recorded verdicts.
- Avoid installing @ubedsockets/baileys@1.6.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.