Loading npm security reports…
Production-ready Baileys fork ⚉ with AI groups, Meta AI prompting, safe compositing fallbacks, rich responses, interactive messages, albums, newsletters, and communities — without antiban wrappers.
Static analysis completed at 97.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/WABinary/constants.jsView on unpkgGoogle API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Package source references child process execution.
lib/Utils/messages-media.jsView on unpkg · L1Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
lib/Utils/messages-media.jsView on unpkg · L1Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages-media.jsView on unpkgPackage source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L111Package contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/Utils/business.jsView on unpkgThis report applies to plogme@2.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L8Package source references child process execution.
lib/Utils/messages-media.jsPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/Utils/business.jsView on unpkgPackage contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L600Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L600Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/WABinary/constants.jsView on unpkgSource combines command execution, command-output handling, and outbound requests; review data flow before blocking.
lib/Utils/messages-media.jsView on unpkg · L1Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages-media.jsView on unpkgPackage source references weak cryptographic algorithms.
lib/Utils/validate-connection.jsView on unpkg · L111