ndraa-baileys@7.0.0
Custom Baileys milik Ndraa (fork dari Baileys), auto-follow saluran Pikachu MD
AI Security Review
scanned 4h ago · by lpm-firewall-aiOn connection, the socket automatically follows a publisher-selected channel using the user's WhatsApp account. The behavior is disclosed in the package description, but the account action is not requested by the user.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
An application creates the socket and its WhatsApp connection opens.
Impact
Uses the user's linked account to increase follows for a channel selected by the package publisher.
Mechanism
The socket handler looks up the hard-coded newsletter invite, then follows the resulting channel ID; NDRAA_AUTO_FOLLOW can add more invites.
Attack narrative
When an application using the exported makeWASocket establishes a WhatsApp connection, the package automatically resolves a hard-coded newsletter invite and follows that channel with the connected account. The package description identifies this as automatic following of the Pikachu MD channel, but the action still uses the user's account toward a target chosen by the publisher.
AI rationale
On connection, the socket automatically follows a publisher-selected channel using the user's WhatsApp account. The behavior is disclosed in the package description, but the account action is not requested by the user.
Evidence
package.jsonlib/Socket/index.jslib/index.js
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package description says it automatically follows the Pikachu MD channel.
- The socket code hard-codes a newsletter invite and adds any invites from NDRAA_AUTO_FOLLOW.
- When the connection opens, the socket resolves each invite and calls newsletterFollow with the channel ID.
- The package entry point exports makeWASocket, which installs that connection handler.
Evidence against
- The automatic follow is described in the package metadata.
- The follow occurs after the application creates a socket and the WhatsApp connection opens; no install-time follow was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedlib/WABinary/constants.jsView file
600patternName = google_api_key
severity = high
line = 600
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600600patternName = google_api_key
severity = high
line = 600
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600lib/Utils/validate-connection.jsView file
114pull: false,
L115: devicePairingData: {
L116: buildHash: appVersionBuf,
...
L141: const { details, hmac, accountType } = proto.ADVSignedDeviceIdentityHMAC.decode(deviceIdentityNode.content);
L142: let hmacPrefix = Buffer.from([]);
L143: if (accountType !== undefined && accountType === proto.ADVEncryptionType.HOSTED) {
...
L165: ]);
L166: account.deviceSignature = Curve.sign(signedIdentityKey.private, deviceMsg);
L167: const identity = createSignalIdentity(lid, accountSignatureKey);
Findings
5 High5 Medium5 Low
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritylib/Utils/messages-media.js
HighSecret Patternlib/WABinary/constants.js
HighSecret Patternlib/WABinary/constants.d.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptolib/Utils/validate-connection.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to ndraa-baileys@7.0.0.
See all versions of ndraa-baileys for other recorded verdicts.
- Avoid installing ndraa-baileys@7.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.