ipungg-baileys@1.0.0
WhatsApp Web API Library - Ipung Baileys with Auto Channel Follow
This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe exported socket constructor reaches code that automatically follows a package-selected newsletter on the connected account. This is a concrete, unrequested account mutation, so the package should be blocked.
Decision evidence
public snapshot- The package entrypoint exports a socket constructor that reaches the newsletter socket through the registration, business, receive, and send layers.
- The newsletter socket sends a follow query for a fixed newsletter ID.
- Constructing the newsletter socket starts the follow attempt automatically, with retries and an additional attempt when the connection opens.
Source & flagged code
4 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
WAProto/index.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgFindings
Affected versions and remediation
This report applies to ipungg-baileys@1.0.0.
See all versions of ipungg-baileys for other recorded verdicts.
- Avoid installing ipungg-baileys@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.