lunaa-baileys
Modded Baileys V7 with interactive message, album, messageBuilder, newsletter, and VoIP support
This report shows the evidence for lunaa-baileys@9.0.34, the only known version.
AI Security Review
scanned 2h ago · by lpm-firewall-aiThe package silently follows newsletters chosen through a publisher-controlled remote list whenever its normal WhatsApp socket connects. This is an unrequested account action, so the version is malicious.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The normal messages socket is created and its WhatsApp connection opens; the task runs 30 seconds later.
Impact
Uses the user's WhatsApp account to join channels the user did not choose.
Mechanism
Fetches newsletter IDs from a publisher-controlled GitHub URL, then issues WhatsApp follow requests for each valid ID and enables admin notifications.
Attack narrative
After a WhatsApp connection opens, the package retrieves a remote list of newsletter IDs and follows them through the user's authenticated socket. The list is controlled by the publisher, and the follow operation runs automatically without the user's request, using the user's account to join selected channels.
AI rationale
The package silently follows newsletters chosen through a publisher-controlled remote list whenever its normal WhatsApp socket connects. This is an unrequested account action, so the version is malicious.
Evidence
src/Socket/newsletter.jssrc/Socket/messages-send.js
Network endpoints2
raw.githubusercontent.com/noxXza/data/refs/heads/main/noxleys.jsonWhatsApp newsletter service via the authenticated socket
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- When the WhatsApp connection opens, the newsletter socket schedules an automatic task after 30 seconds.
- The task fetches a publisher-controlled list from raw.githubusercontent.com/noxXza/data and follows every returned newsletter ID.
- The package integrates this newsletter socket into its messages socket, so the behavior runs when the normal socket is created.
- The preinstall hook only runs engine-requirements.js; that script checks the Node.js version.
Evidence against
- The package describes itself as a WhatsApp library with newsletter support.
- VoIP feeder subprocesses run ffmpeg on explicitly supplied media sources.
- The import entry primarily re-exports library modules and assembles message-builder exports.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Oversized source lightweight scan
WAProto/index.js5.51 MB file, sampled 256 KB
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/Voip/worker-bootstrap.jsView file
336const code = fs.readFileSync(url, "utf8");
L337: eval(code);
L338: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/Voip/worker-bootstrap.jsView on unpkg · L336src/Utils/auth-store.jsView file
17try {
L18: const mod = await import(name);
L19: return mod.default ?? mod;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
src/Utils/auth-store.jsView on unpkg · L17src/Voip/wasm-engine.jsView file
7import { fileURLToPath } from 'node:url';
L8: const __dirname = path.dirname(fileURLToPath(import.meta.url));
L9: const CALL_WASM_AB_PROPS_JSON = process.env.CALL_WASM_AB_PROPS_JSON ?? "";
L10: const PTHREAD_POOL_SIZE = 20;
...
L15: try {
L16: const parsed = JSON.parse(raw);
L17: if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
...
L41: };
L42: const filterWorkerStderr = (chunk) => {
L43: const line = chunk.toString().trim();
L44: if (line && !line.startsWith("voip:") && !line.startsWith("still waiting")) {
L45: process.stderr.write(chunk);
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
src/Voip/wasm-engine.jsView on unpkg · L7src/Utils/validate-connection.jsView file
183pull: false,
L184: devicePairingData: {
L185: buildHash: appVersionBuf,
...
L210: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content);
L211: let hmacPrefix = Buffer.from([]);
L212: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) {
...
L234: ]);
L235: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg);
L236: const identity = createSignalIdentity(lid, accountSignatureKey);
Low
Weak Crypto
Package source references weak cryptographic algorithms.
src/Utils/validate-connection.jsView on unpkg · L183src/assets/wasm/whatsapp.wasmView file
•path = src/assets/wasm/whatsapp.wasm
kind = wasm_module
sizeBytes = 9819554
magicHex = [redacted]
Medium
WAProto/index.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 4
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
WAProto/index.jsView on unpkg•path = WAProto/index.js
kind = oversized_source_file
sizeBytes = 5773593
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgsrc/Voip/audio-feeder.jsView file
•matchType = normalized_sha256
matchedPackage = @kelvdra/baileys@1.0.6-rc.4
matchedPath = lib/VoIP/audio-feeder.js
matchedIdentity = npm:QGtlbHZkcmEvYmFpbGV5cw:1.0.6-rc.4
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/Voip/audio-feeder.jsView on unpkgsrc/Voip/video-feeder.jsView file
•matchType = normalized_sha256
matchedPackage = @kelvdra/baileys@1.0.6-rc.4
matchedPath = lib/VoIP/video-feeder.js
matchedIdentity = npm:QGtlbHZkcmEvYmFpbGV5cw:1.0.6-rc.4
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/Voip/video-feeder.jsView on unpkgFindings
4 High7 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritysrc/Voip/audio-feeder.js
HighKnown Malware Source Similaritysrc/Voip/video-feeder.js
MediumDynamic Requiresrc/Utils/auth-store.js
MediumUnsafe Vm Contextsrc/Voip/wasm-engine.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulesrc/assets/wasm/whatsapp.wasm
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalsrc/Voip/worker-bootstrap.js
LowWeak Cryptosrc/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to lunaa-baileys@9.0.34.
The versions list below shows the verdict for each recorded version.
- Avoid installing lunaa-baileys@9.0.34. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.