registry / lordceaser-baileys / 1.0.36
lordceaser-baileys@1.0.36
LordCeaser Baileys 1.0.36 - ALL DEPS FINAL
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Oversized source lightweight scan
WAProto/index.js7.85 MB file, sampled 256 KB
ChildProcess
Source & flagged code
7 flaggedlib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/Utils/crypto.jsView file
1import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes } from 'crypto';
L2: /* @ts-ignore */
...
L12: return {
L13: private: Buffer.from(privKey),
L14: // remove version byte
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/Utils/crypto.jsFindings
4 High4 Medium4 Low
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis LimitedWAProto/index.js
HighSecret Patternlib/WABinary/constants.js
HighSecret Patternlib/WABinary/constants.d.ts
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowWeak Cryptolib/Utils/crypto.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to lordceaser-baileys@1.0.36.
See all versions of lordceaser-baileys for other recorded verdicts.
- Review the evidence and your use of lordceaser-baileys@1.0.36 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.