@zaidevx/baileys@1.0.3
A WebSockets library for interacting with WhatsApp Web.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe normal socket path silently fetches publisher-controlled newsletter IDs and follows them through the user’s WhatsApp account after connection. That is an unrequested account action toward targets chosen by the publisher, so this version is malicious.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A consumer constructs the package’s normal WhatsApp socket and the connection opens.
Impact
Uses the user’s WhatsApp account to follow channels selected by the package publisher without the user requesting those follows.
Mechanism
The newsletter socket fetches a newsletter ID list from a base64-obscured raw GitHub URL, then schedules WhatsApp follow operations for each ID.
Attack narrative
When a consumer constructs the standard socket, the newsletter code downloads a list of newsletter IDs from a base64-obscured raw GitHub URL. Once WhatsApp connects, it schedules follow operations for every listed ID. This performs account actions toward publisher-selected targets without an explicit user request.
AI rationale
The normal socket path silently fetches publisher-controlled newsletter IDs and follows them through the user’s WhatsApp account after connection. That is an unrequested account action toward targets chosen by the publisher, so this version is malicious.
Evidence
lib/Socket/newsletter.jslib/Socket/username.jslib/Socket/messages-send.jslib/Socket/index.js
Network endpoints2
raw.githubusercontent.comwss://web.whatsapp.com/ws/chat
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The newsletter socket decodes a base64 URL pointing to a raw GitHub channel list.
- Constructing the newsletter socket automatically fetches that list and parses newsletter IDs.
- After the WhatsApp connection opens, the package schedules follows for every listed ID without user action.
- The normal socket construction path calls makeNewsletterSocket through makeUsernameSocket and makeMessagesSocket.
Evidence against
- The package is described as a WhatsApp WebSocket library, and its ordinary WhatsApp networking serves that purpose.
- The package’s declared prepublishOnly script is not an install-time hook.
Behavioral surface
ChildProcessCryptoDynamicRequireFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
9 flaggedlib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/antiban.cjsView file
1const __importMetaUrl = require('url').pathToFileURL(__filename).href
L2: ;('use strict')
Medium
Dynamic Require
Package source references dynamic require/import behavior.
lib/antiban.cjsView on unpkg · L1Findings
6 High5 Medium6 Low
HighHigh Secretlib/WABinary/constants.js
HighBase64 Obscured Urllib/Socket/newsletter.js
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumDynamic Requirelib/antiban.cjs
MediumNetwork
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
Low
Affected versions and remediation
This report applies to @zaidevx/baileys@1.0.3.
See all versions of @zaidevx/baileys for other recorded verdicts.
- Avoid installing @zaidevx/baileys@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.