registry  /  phoenix-baileys-v2  /  2.2.21

phoenix-baileys-v2@2.2.21

A high-performance WhatsApp Web library with Rust WASM acceleration

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsUrlStrings
Manifest
GitDependency
scanned 124 file(s), 2.32 MB of source, external domains: acs.whatsapp.com, api.telegram.org, call.whatsapp.com, graph.whatsapp.com, raw.githubusercontent.com, web.whatsapp.com, www.whatsapp.com
Oversized source lightweight scan
WAProto/index.js11.9 MB file, sampled 256 KB
ChildProcess

Source & flagged code

5 flagged · loading source
package.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
src/WABinary/constants.jsView file
604patternName = google_api_key severity = high line = 604 matchedText = 'AIzaSyD...Lk',
High
High Secret

Package contains a high-severity secret pattern.

src/WABinary/constants.jsView on unpkg · L604
604patternName = google_api_key severity = high line = 604 matchedText = 'AIzaSyD...Lk',
High
Secret Pattern

Google API key in src/WABinary/constants.js

src/WABinary/constants.jsView on unpkg · L604
src/antiban.jsView file
1const __importMetaUrl = require('url').pathToFileURL(__filename).href L2: ;('use strict')
Medium
Dynamic Require

Package source references dynamic require/import behavior.

src/antiban.jsView on unpkg · L1
WAProto/index.jsView file
•path = WAProto/index.js kind = oversized_source_file sizeBytes = 12496579 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

WAProto/index.jsView on unpkg

Findings

4 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretsrc/WABinary/constants.js
HighOversized Source FileWAProto/index.js
HighSecret Patternsrc/WABinary/constants.js
MediumDynamic Requiresrc/antiban.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings