registry / shadowx-baileys / 7.0.0-rc13-shadowx.1
shadowx-baileys@7.0.0-rc13-shadowx.1
ShadowX WhatsApp Web socket library based on the supplied LotusBail RC13 build
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe install hook only enforces a Node.js version requirement. The hard-coded WhatsApp newsletter follow occurs only when the caller explicitly enables its option.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation, import, and user-invoked WhatsApp socket operations.
Impact
No unsolicited data collection or account action was identified.
Mechanism
The install hook checks the Node.js version; the hard-coded newsletter follow is gated by an explicit option that defaults to false.
AI rationale
The install hook only enforces a Node.js version requirement. The hard-coded WhatsApp newsletter follow occurs only when the caller explicitly enables its option.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The preinstall hook runs engine-requirements.js.
- The preinstall script only checks the Node.js major version and exits if it is below 20.
- Following the hard-coded newsletter requires shadowXAutoFollowChannel: true; the option defaults to false, and the follow runs after the connection opens.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/WABinary/constants.jsView file
26patternName = google_api_key
severity = high
line = 26
High
High Secret
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L2626patternName = google_api_key
severity = high
line = 26
High
Secret Pattern
Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L26Findings
5 High4 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretlib/WABinary/constants.js
HighSemantic Analysis LimitedWAProto/index.js
HighSecret Patternlib/WABinary/constants.js
HighSecret Patternlib/WABinary/constants.d.ts
MediumDynamic Requirelib/Types/Events.js
MediumNetwork
MediumShips Build HelperWAProto/GenerateStatics.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to shadowx-baileys@7.0.0-rc13-shadowx.1.
See all versions of shadowx-baileys for other recorded verdicts.
- Review the evidence and your use of shadowx-baileys@7.0.0-rc13-shadowx.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.