registry / whalibmob / 5.33.15

whalibmob@5.33.15

Node.js library for WhatsApp — register a number over SMS, or link as a companion by QR. Signal E2E encryption, media, groups, channels.

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No attack was identified in the inspected source. The observed network and cryptographic code supports WhatsApp registration and Apple push-token setup.

Static reason

One or more suspicious static signals were detected.

Trigger

The library user invokes registration or push-token functionality.

Impact

No concrete malicious effect was established from the inspected source.

Mechanism

Registration code makes service requests and APNs code prepares Apple push registration; the inspected endpoint is Apple-owned.

AI rationale

Inspected source ties the flagged cryptography, protocol data, and network behavior to WhatsApp registration and Apple push setup. The manifest has no install lifecycle hook, and the reviewed excerpts establish no malicious attack surface.

Evidence

package.jsonlib/tokens.jslib/apns.jslib/AndroidApk.jslib/Registration.js

Network endpoints1

albert.apple.com/WebObjects/ALUnbrick.woa/wa/deviceActivation

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

whalibmob@5.33.15

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code