Loading npm security reports…
WebSocket-based JavaScript library for interacting with the WhatsApp Web API
Creating the normal message socket silently schedules remote-controlled activity. The package fetches a list from https://files.gifted.co.ke/file/chJids.json and uses the connected WhatsApp session to query each returned identifier.
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L256Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/Socket/newsletter.jsView on unpkg · L43Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages.jsView on unpkgThis report applies to spencer-baileys@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Package contains a high-severity secret pattern.
lib/WABinary/constants.jsView on unpkg · L603Google API key in lib/WABinary/constants.js
lib/WABinary/constants.jsView on unpkg · L603Package ships non-JavaScript build or shell helper files.
WAProto/GenerateStatics.shView on unpkgPackage contains source files above the normal full-analysis size ceiling.
WAProto/index.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/Utils/messages.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L256Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/Socket/newsletter.jsView on unpkg · L43