@zyrennofficiall/baileys@5.1.0
A WebSockets library for interacting with WhatsApp Web.
AI Security Review
scanned 2h ago · by lpm-firewall-aiThe package performs WhatsApp account actions toward publisher-selected channels by default: it schedules four newsletter follows during socket construction and follows another channel when connected. The opt-out does not make these unrequested actions user-directed, so this is malicious.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Creating the newsletter socket schedules four follows; opening the connection triggers a follow of a fifth channel. The latter is on by default.
Impact
The user’s WhatsApp account is made to follow channels they did not choose.
Mechanism
Hard-coded newsletter IDs are passed to WhatsApp’s newsletter FOLLOW operation through the socket.
Attack narrative
When the package constructs its socket, it schedules four newsletter follows for hard-coded targets. When the connection opens, it also follows a hard-coded update channel unless the caller opts out. These actions use the user's WhatsApp account without a request to follow those targets.
AI rationale
The package performs WhatsApp account actions toward publisher-selected channels by default: it schedules four newsletter follows during socket construction and follows another channel when connected. The opt-out does not make these unrequested actions user-directed, so this is malicious.
Evidence
lib/Socket/index.jslib/Socket/newsletter.jslib/Socket/username.jslib/Defaults/index.js
Network endpoints3
web.whatsapp.comWhatsApp newsletter channel 120363430929084263@newsletterFour additional hard-coded newsletter IDs in lib/Socket/newsletter.js
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Creating the newsletter socket schedules follows for four hard-coded, base64-encoded newsletter IDs.
- The scheduled requests decode each ID and invoke the WhatsApp newsletter FOLLOW operation.
- The package’s socket setup follows a hard-coded update channel when the WhatsApp connection opens; this is enabled by default.
- The newsletter follow behavior is reached through the socket construction chain.
- The preinstall script only checks the Node.js major version and exits for versions below 20.
Evidence against
- The package describes itself as a WebSockets library for interacting with WhatsApp Web, so WhatsApp network access is expected.
- The install-time Node.js version check does not itself collect or transmit data.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Findings
6 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis Limitedlib/Utils/business.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighKnown Malware Source Fingerprint Signaturelib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
Affected versions and remediation
This report applies to @zyrennofficiall/baileys@5.1.0.
See all versions of @zyrennofficiall/baileys for other recorded verdicts.
- Avoid installing @zyrennofficiall/baileys@5.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.