registry / spencer-baileys / 1.0.0

spencer-baileys@1.0.0

Spencer Official Baileys — custom fork with native Group Status support

AI Security Review

scanned 12d ago · by lpm-firewall-ai

No attack surface was identified. The inspected code implements WhatsApp socket, newsletter, protocol-token, and media-processing functions.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

No malicious trigger was identified.

Impact

No confirmed malicious impact was established.

Mechanism

No install-time execution, secret harvesting, persistence, or unapproved outbound action was found in the inspected entry points.

AI rationale

Static inspection found a normal library entry point and caller-driven messaging features, with no lifecycle hook or concrete malicious behavior. The package is clean based on the inspected source.

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest declares a library entry point and contains no lifecycle scripts.
The required binary constants file defines protocol token data.
Newsletter actions accept caller-provided parameters and use the existing socket.
Media-message preparation validates a supported media type before processing.
Temporary media paths are generated from random message IDs.

spencer-baileys@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code