@ubedsockets/baileys@1.7.1
@ubedsockets/baileys,baileys A high-performance WhatsApp Web API wrapper based on Baileys, optimized for bot developers with integrated utility scrapers.
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe package silently follows a hard-coded newsletter when the user's WhatsApp connection opens, an account action toward a publisher-selected target that the user did not request. This is concrete behavior in the normal socket path and warrants blocking.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The user's WhatsApp connection opens after creating the normal socket.
Impact
The user's account is made to subscribe to a publisher-selected newsletter without a request to do so.
Mechanism
A connection update handler checks subscription status and sends a follow query for the selected newsletter when not already followed.
Attack narrative
When a WhatsApp connection opens, the package checks whether the account follows newsletter 120363410154606795@newsletter and sends a follow request if it does not. The standard message socket constructs this newsletter socket, so the action can occur during ordinary use without an explicit follow request.
AI rationale
The package silently follows a hard-coded newsletter when the user's WhatsApp connection opens, an account action toward a publisher-selected target that the user did not request. This is concrete behavior in the normal socket path and warrants blocking.
Evidence
lib/Socket/newsletter.jslib/Socket/messages-send.js
Network endpoints1
WhatsApp servers (S_WHATSAPP_NET)
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- On WhatsApp connection open, the newsletter socket checks a hard-coded publisher-selected newsletter and follows it if the account is not already subscribed.
- The standard message socket constructs the newsletter socket, making the follow handler part of normal socket use.
- The preinstall script only checks the Node.js major version and exits on versions below 20.
Evidence against
- The package presents itself as a WhatsApp Web API wrapper, where WhatsApp network access and account actions are part of its purpose.
- The inspected preinstall hook does not contact the network or collect host data.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
603patternName = google_api_key
severity = high
line = 603
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603603patternName = google_api_key
severity = high
line = 603
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603Findings
7 High7 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Similaritylib/Utils/messages.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumUnsafe Vm Contextlib/Voip/wasm-engine.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulelib/assets/wasm/whatsapp.wasm
MediumShips Build Helperlib/Signal/libsignalnode/generate-proto.sh
Affected versions and remediation
This report applies to @ubedsockets/baileys@1.7.1.
See all versions of @ubedsockets/baileys for other recorded verdicts.
- Avoid installing @ubedsockets/baileys@1.7.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.