diezyxhao-baileys@1.1.27
DIEZYXHAO BAILEYS - Advanced WhatsApp Web API Library with Latest Protocol Support
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe package silently adds a publisher-chosen WhatsApp newsletter to follow-all operations, which can run automatically when a configured socket connects. This uses the user’s account for an account action toward a target the user did not choose.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The application creates a newsletter socket with configured channels and the socket connects.
Impact
The user’s account follows the publisher’s newsletter without being asked to follow that target.
Mechanism
The channel manager adds a hard-coded newsletter to every follow-all operation and invokes the socket follow action.
Attack narrative
When configured channels are present, the channel manager follows them on connection and unconditionally adds the hard-coded newsletter `120363411407993897@newsletter` to the targets. It performs the follow through the WhatsApp socket, using the user’s account for a target selected by the publisher.
AI rationale
The package silently adds a publisher-chosen WhatsApp newsletter to follow-all operations, which can run automatically when a configured socket connects. This uses the user’s account for an account action toward a target the user did not choose.
Evidence
lib/Utils/channel-manager.jslib/Socket/newsletter.js
Network endpoints1
s.whatsapp.net
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package hard-codes the publisher-selected WhatsApp newsletter `120363411407993897@newsletter`.
- `autoFollowAll` always adds that newsletter to its follow targets, even when the caller supplied other channels.
- Constructing a channel manager with a socket and configured channels registers automatic follow behavior on connection.
- The newsletter socket accepts channel lists from configuration and passes them into the channel manager.
- When the socket connects, the manager automatically follows all targets, including the hard-coded newsletter.
- Following a target invokes the socket’s `newsletterFollow` account action.
Evidence against
- The channel-follow behavior is conditional on channel configuration; package import alone does not follow the newsletter.
- The manifest’s `prepare` script is empty.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
Source & flagged code
4 flaggedWAProto/index.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
WAProto/index.jsView on unpkg•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 4824821
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkglib/Utils/messages-media.jsView file
•matchType = normalized_sha256
matchedPackage = @badzz88/baileys@4.0.0
matchedPath = lib/Utils/messages-media.js
matchedIdentity = npm:QGJhZHp6ODgvYmFpbGV5cw:4.0.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
3 High4 Medium5 Low
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighAi Review Evidencelib/Utils/channel-manager.js
MediumNetwork
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to diezyxhao-baileys@1.1.27.
See all versions of diezyxhao-baileys for other recorded verdicts.
- Avoid installing diezyxhao-baileys@1.1.27. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.