registry / lordceaser-baileys / 2.0.54
lordceaser-baileys@2.0.54
CEASER v2.0.54 FINAL - BIG LOGO on install + CUSTOM CEASERMD + PAIRING FIXED - 171 files
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe lifecycle hook is intrusive but the inspected source performs banner output and local socket wrapping only. No concrete malicious behavior or self-dependency chain was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Package installation runs the postinstall hook.
Impact
No file, credential, network, or control-surface action was found.
Mechanism
Imports the local entry point and prints terminal output.
AI rationale
The lifecycle hook is intrusive but the inspected source performs banner output and local socket wrapping only. No concrete malicious behavior or self-dependency chain was found.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- An automatic postinstall hook imports index.js during installation.
- The imported module prints a banner, then only loads its local lib module and wraps WhatsApp socket methods.
Evidence against
- No source code reads files, environment variables, or credentials.
- No network request, shell execution, dynamic code execution, persistence, or project-file mutation is present.
- There is no runtime dependency on this package itself.
Behavioral surface
NoLicense
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node -e "try{require('./index.js')}catch(e){console.log('CEASER installed')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('./index.js')}catch(e){console.log('CEASER installed')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg7"scripts": {
"postinstall": "node -e \"try{require('./index.js')}catch(e){console.log('CEASER installed')}\""
}
Low
Suspicious Lifecycle Evidence
An automatic postinstall hook imports index.js during installation.
package.jsonView on unpkg · L7index.jsView file
Findings
1 Critical1 High4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
LowScripts Present
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceindex.js
Affected versions and remediation
This report applies to lordceaser-baileys@2.0.54.
See all versions of lordceaser-baileys for other recorded verdicts.
- Review the evidence and your use of lordceaser-baileys@2.0.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.