ichigokurosaki-baileys@1.0.0
Modded Baileys v7 with interactive message, album, newsletter, and VoIP support
AI Security Review
scanned 1h ago · by lpm-firewall-aiThe package automatically uses the connected WhatsApp account to follow a hard-coded newsletter chosen by the publisher. This unsolicited account action is triggered by default during socket connection, so the package is malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Creating a makeWASocket connection and reaching the open state; the default delay is 90 seconds.
Impact
Uses the user’s WhatsApp account to follow a channel without an explicit request, potentially altering the account and boosting the publisher’s audience.
Mechanism
The socket setup calls triggerAutoFollow, which sends a FOLLOW query for the hard-coded newsletter unless the caller disables the feature.
Attack narrative
When an application creates a WhatsApp socket, the package schedules an automatic follow action. After the connection opens and a delay passes, it sends a FOLLOW query to the hard-coded newsletter 120363409557700746@newsletter. The behavior is enabled by default and can only be avoided by overriding the configuration.
AI rationale
The package automatically uses the connected WhatsApp account to follow a hard-coded newsletter chosen by the publisher. This unsolicited account action is triggered by default during socket connection, so the package is malicious.
Evidence
lib/Defaults/index.jslib/Socket/index.jslib/Socket/newsletter.js
Network endpoints2
web.whatsapp.com@s.whatsapp.net
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package’s main entry exports makeWASocket, which constructs a socket and calls triggerAutoFollow.
- The default connection configuration enables auto-follow and names newsletter 120363409557700746@newsletter.
- triggerAutoFollow runs unless explicitly disabled, then waits for the connection to open and calls runAutoFollow.
- runAutoFollow sends a WhatsApp FOLLOW query containing the selected newsletter ID.
Evidence against
- The package describes itself as a modded Baileys library for WhatsApp bot development.
- The manifest has no install, preinstall, or postinstall lifecycle hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggedlib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/VoIP/worker-bootstrap.jsView file
346const code = fs.readFileSync(url, "utf8");
L347: eval(code);
L348: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
lib/VoIP/worker-bootstrap.jsView on unpkg · L346Findings
4 High7 Medium6 Low
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis LimitedWAProto/index.js
HighSecret Patternlib/WABinary/constants.js
HighSecret Patternlib/WABinary/constants.d.ts
MediumUnsafe Vm Contextlib/VoIP/wasm-engine.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulelib/assets/wasm/whatsapp.wasm
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvallib/VoIP/worker-bootstrap.js
Low
Affected versions and remediation
This report applies to ichigokurosaki-baileys@1.0.0.
See all versions of ichigokurosaki-baileys for other recorded verdicts.
- Avoid installing ichigokurosaki-baileys@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.