Loading npm security reports…
Lightweight WhatsApp Web API with multi-session support. Forked from Gifted Baileys 2.5.8 + latest WA protocol. Created by TrackerWanga.
Creating the normal WhatsApp socket triggers a delayed, concealed remote-controlled action. It downloads arbitrary newsletter IDs and sends authenticated WhatsApp metadata queries for each.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L256Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/Socket/newsletter.jsView on unpkg · L43Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L53Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L53Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L256Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/Socket/newsletter.jsView on unpkg · L43