registry / Malware / ruby-baileys

ruby-baileys

WhatsApp Web API — Ruby-Baileys by Kyuu. 100% Powered by @rexxhayanasi/elaina-baileys with integrated MessageBuilder, native flow, VoIP calling, and database auth stores.

This report shows the evidence for ruby-baileys@1.5.18. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1h ago · by lpm-firewall-ai

The package silently uses the user's WhatsApp account to follow two hard-coded channels whenever a connection opens. This is an unrequested account action toward publisher-chosen targets.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A caller creates a socket with makeWASocket and its connection opens.

Impact

The user's WhatsApp account follows channels the user did not choose.

Mechanism

The connection handler resolves fixed newsletter invite codes to channel IDs, then calls newsletterFollow for each one.

Attack narrative

When a WhatsApp socket created by the package connects, the package looks up two fixed newsletter invite codes and follows the resulting channels through the user's account. The user does not need to request either follow action.

AI rationale

The package silently uses the user's WhatsApp account to follow two hard-coded channels whenever a connection opens. This is an unrequested account action toward publisher-chosen targets.

Evidence

src/Socket/index.js

Network endpoints1

WhatsApp newsletter API; invite codes 0029VbDO8tI2phHLTSN2ed0U and 0029VbDXYlKDJ6H1D7Dm0f13

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

makeWASocket registers a connection-update handler that runs when the WhatsApp connection opens.
On connection open, the handler looks up two hard-coded newsletter invite codes and follows each channel with an ID returned by WhatsApp.

Evidence against

The preinstall hook only checks the Node.js major version and exits if it is below 20.
The package presents itself as a WhatsApp Web API library, so creating a WhatsApp socket is expected.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 142 file(s), 3.26 MB of source, external domains: a2ui.org, call.whatsapp.com, emscripten.org, fburl.com, raw.githubusercontent.com, wa.me, web.whatsapp.com, www.internalfb.com, www.npmjs.com, www.whatsapp.com

Source & flagged code

13 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/Voip/worker-bootstrap.jsView file

337const code = fs.readFileSync(url, "utf8"); L338: eval(code); L339: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/Voip/worker-bootstrap.jsView on unpkg · L337

src/Utils/auth-store.jsView file

18try { L19: const mod = await import(name); L20: return mod.default ?? mod;

Medium

Findings

6 High8 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritysrc/Utils/messages-media.js

HighKnown Malware Source Similaritysrc/Voip/audio-feeder.js

HighKnown Malware Source Similaritysrc/Voip/video-feeder.js

HighKnown Malware Source Fingerprint Signaturesrc/Utils/messages-media.js

MediumDynamic Requiresrc/Utils/auth-store.js

MediumUnsafe Vm Contextsrc/Voip/wasm-engine.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulesrc/assets/wasm/whatsapp.wasm

MediumShips Build HelperWAProto/GenerateStatics.sh

Affected versions and remediation

This report applies to ruby-baileys@1.5.18.

The versions list below shows the verdict for each recorded version.

Avoid installing ruby-baileys@1.5.18. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-05 06:54:42.931Z (UTC).

Source advisory published: 2026-10-26 00:00:00.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.5.18latestshownMaliciousMalwareBlockPublishedOct 10, 2026, 6:25 PM 1.5.17MaliciousMalwareBlockPublishedOct 9, 2026, 9:18 AM

registry / Malware / ruby-baileys

ruby-baileys

WhatsApp Web API — Ruby-Baileys by Kyuu. 100% Powered by @rexxhayanasi/elaina-baileys with integrated MessageBuilder, native flow, VoIP calling, and database auth stores.

This report shows the evidence for ruby-baileys@1.5.18. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1h ago · by lpm-firewall-ai

The package silently uses the user's WhatsApp account to follow two hard-coded channels whenever a connection opens. This is an unrequested account action toward publisher-chosen targets.

Static reason

Trigger

A caller creates a socket with makeWASocket and its connection opens.

Impact

The user's WhatsApp account follows channels the user did not choose.

Mechanism

The connection handler resolves fixed newsletter invite codes to channel IDs, then calls newsletterFollow for each one.

Attack narrative

AI rationale

The package silently uses the user's WhatsApp account to follow two hard-coded channels whenever a connection opens. This is an unrequested account action toward publisher-chosen targets.

Evidence

src/Socket/index.js

Network endpoints1

WhatsApp newsletter API; invite codes 0029VbDO8tI2phHLTSN2ed0U and 0029VbDXYlKDJ6H1D7Dm0f13

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

makeWASocket registers a connection-update handler that runs when the WhatsApp connection opens.
On connection open, the handler looks up two hard-coded newsletter invite codes and follows each channel with an ID returned by WhatsApp.

Evidence against

The preinstall hook only checks the Node.js major version and exits if it is below 20.
The package presents itself as a WhatsApp Web API library, so creating a WhatsApp socket is expected.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

13 flagged

package.jsonView file

•scripts.preinstall = node ./engine-requirements.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/Voip/worker-bootstrap.jsView file

337const code = fs.readFileSync(url, "utf8"); L338: eval(code); L339: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/Voip/worker-bootstrap.jsView on unpkg · L337

src/Utils/auth-store.jsView file

18try { L19: const mod = await import(name); L20: return mod.default ?? mod;

Medium

Findings

6 High8 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis LimitedWAProto/index.js

HighKnown Malware Source Similaritysrc/Utils/messages-media.js

HighKnown Malware Source Similaritysrc/Voip/audio-feeder.js

HighKnown Malware Source Similaritysrc/Voip/video-feeder.js

HighKnown Malware Source Fingerprint Signaturesrc/Utils/messages-media.js

MediumDynamic Requiresrc/Utils/auth-store.js

MediumUnsafe Vm Contextsrc/Voip/wasm-engine.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulesrc/assets/wasm/whatsapp.wasm

MediumShips Build HelperWAProto/GenerateStatics.sh

Affected versions and remediation

This report applies to ruby-baileys@1.5.18.

The versions list below shows the verdict for each recorded version.

Avoid installing ruby-baileys@1.5.18. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-05 06:54:42.931Z (UTC).

Source advisory published: 2026-10-26 00:00:00.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.5.18latestshownMaliciousMalwareBlockPublishedOct 10, 2026, 6:25 PM 1.5.17MaliciousMalwareBlockPublishedOct 9, 2026, 9:18 AM

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages