registry / ishumdz-bail / 1.0.25

ishumdz-bail@1.0.25

⚠ Under review

WhatsApp API Modification By Lovely

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 139 file(s), 2.19 MB of source, external domains: api.whatsapp.com, call.whatsapp.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.whatsapp.com

Oversized source lightweight scan

WAProto/index.js11.6 MB file, sampled 256 KB

No sampled risky behavior triggered.

Source & flagged code

9 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/WABinary/constants.jsView file

Lines 580-620javascript

580 '044',

581 'mms_cat_v1_forward_hot_override_enabled',

582 'user_notice',

583 'ptt_waveform_send',

584 '047',

585 'Asia/Calcutta',

586 '250',

587 'md_privacy_v2',

588 '31',

589 '29',

590 '128',

591 'md_messaging_enabled',

592 '046',

593 'crypto',

594 '690',

595 '045',

596 'enc_iv',

597 '75',

598 'failure',

599 'ptt_oot_playback',

600 'AIzaSyDR5yfaG7OG8sMTUj8kfQEb8T9pN8BM6Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L600

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L600

601 'w',

602 '048',

603 '2201',

604 'web_large_files_ui',

605 'Asia/Makassar',

606 '812',

607 'status_collapse_muted',

608 '1334',

609 '257',

610 '2HP4dm',

611 '049',

612 'patches',

613 '1290',

614 '43cY6T',

615 'America/Caracas',

616 'web_sticker_maker',

617 'campaign',

618 'ptt_pausable_enabled',

619 '33',

620 '42',

lib/Caller/worker-bootstrap.mjsView file

Lines 326-366javascript

326__modules["Promise"] = { exports: Promise };

327const bxFunc = function (id) { return id; };

328bxFunc.getURL = function

lib/Caller/index.mjsView file

Lines 10-50javascript

10 *

11 * @author ShellTear

12 */

13import { EventEmitter } from "node:events";

14import { randomBytes, createHmac } from "node:crypto";

15import { resolve }

lib/Caller/wasm-engine.mjsView file

Lines 1-37javascript

1var _a;

2/**

3 * WhatsApp VoIP WASM engine.

4 *

5 * Loads the WhatsApp Web VoIP WASM stack inside a Node.js `vm.Context`,

6 * spawns a 20-thread `worker_threads` pool to mirror the browser's pthread

7 * model, and exposes a callback-based JS bridge. Audio-only (no video).

8 *

9 * @author ShellTear

lib/Utils/validate-connection.jsView file

Lines 87-127javascript

87 supportBizHostedMsg: true,

88 supportRecentSyncChunkMessageCountTuning: true,

89 supportHostedGroupMsg: true,

90 supportFbidBotChatHistory: true,

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 12145764 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/business.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Utils/business.jsView on unpkg

ishumdz-bail@1.0.25

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code