registry / fca-uzair-rajput-developer / 1.10.1

fca-uzair-rajput-developer@1.10.1

Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

Uzair Rajput Facebook Chat API for Node.js - Interact with Facebook Messenger programmatically

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime networking is package-aligned Facebook/Messenger automation plus an npm update check on explicit login; optional updater installation and remote control require configuration.

Static reason

One or more suspicious static signals were detected.

Trigger

User calls `login()`; optional update install or remote WebSocket requires values in `fca-uzair.json`.

Impact

No unconsented install-time mutation, remote command execution, or credential exfiltration endpoint was confirmed.

Mechanism

Facebook API client with configurable update check and event-only WebSocket relay.

Rationale

Scanner signals map to a configurable npm update feature and a user-configured WebSocket event relay. Source inspection found no concrete malicious chain or unconsented lifecycle behavior.

Evidence

package.jsondist/cjs.cjsdist/index.mjsdist/index.jstest/fca.test.cjsREADME.md

Network endpoints4

registry.npmjs.orgwww.facebook.comwww.messenger.comm.facebook.com

fca-uzair-rajput-developer@1.10.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code