lunaa-baileys@9.0.34
Modded Baileys V7 with interactive message, album, messageBuilder, newsletter, and VoIP support
AI Security Review
scanned 4h ago · by lpm-firewall-aiThe package silently follows newsletters chosen through a publisher-controlled remote list whenever its normal WhatsApp socket connects. This is an unrequested account action, so the version is malicious.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The normal messages socket is created and its WhatsApp connection opens; the task runs 30 seconds later.
Impact
Uses the user's WhatsApp account to join channels the user did not choose.
Mechanism
Fetches newsletter IDs from a publisher-controlled GitHub URL, then issues WhatsApp follow requests for each valid ID and enables admin notifications.
Attack narrative
After a WhatsApp connection opens, the package retrieves a remote list of newsletter IDs and follows them through the user's authenticated socket. The list is controlled by the publisher, and the follow operation runs automatically without the user's request, using the user's account to join selected channels.
AI rationale
The package silently follows newsletters chosen through a publisher-controlled remote list whenever its normal WhatsApp socket connects. This is an unrequested account action, so the version is malicious.
Evidence
src/Socket/newsletter.jssrc/Socket/messages-send.js
Network endpoints2
raw.githubusercontent.com/noxXza/data/refs/heads/main/noxleys.jsonWhatsApp newsletter service via the authenticated socket
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- When the WhatsApp connection opens, the newsletter socket schedules an automatic task after 30 seconds.
- The task fetches a publisher-controlled list from raw.githubusercontent.com/noxXza/data and follows every returned newsletter ID.
- The package integrates this newsletter socket into its messages socket, so the behavior runs when the normal socket is created.
- The preinstall hook only runs engine-requirements.js; that script checks the Node.js version.
Evidence against
- The package describes itself as a WhatsApp library with newsletter support.
- VoIP feeder subprocesses run ffmpeg on explicitly supplied media sources.
- The import entry primarily re-exports library modules and assembles message-builder exports.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/Voip/worker-bootstrap.jsView file
336const code = fs.readFileSync(url, "utf8");
L337: eval(code);
L338: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/Voip/worker-bootstrap.jsView on unpkg · L336src/Utils/auth-store.jsView file
17try {
L18: const mod = await import(name);
L19: return mod.default ?? mod;
Findings
4 High7 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritysrc/Voip/audio-feeder.js
HighKnown Malware Source Similaritysrc/Voip/video-feeder.js
MediumDynamic Requiresrc/Utils/auth-store.js
MediumUnsafe Vm Contextsrc/Voip/wasm-engine.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulesrc/assets/wasm/whatsapp.wasm
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalsrc/Voip/worker-bootstrap.js
Affected versions and remediation
This report applies to lunaa-baileys@9.0.34.
See all versions of lunaa-baileys for other recorded verdicts.
- Avoid installing lunaa-baileys@9.0.34. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.