zero-baileys@2.7.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

zero-baileys@2.7.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

6 flagged

package.jsonView file

Lines 12-52json

12 "license": "MIT",

13 "author": "SeaPRST",

14 "main": "lib/index.js",

15 "types": "lib/index.d.ts",

16 "files": [

17 "lib/*",

18 "WAProto/*.js",

19 "engine-requirements.js"

20 ],

21 "scripts": {

22 "build:all": "tsc && typedoc",

23 "build:docs": "typedoc",

24 "build:tsc": "tsc",

25 "changelog:last": "conventional-changelog -p angular -r 2",

26 "changelog:preview": "conventional-changelog -p angular -u",

27 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

28 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

29 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

30 "prepack": "",

31 "prepare": "",

32 "preinstall": "node ./engine-requirements.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 "release": "release-it",

34 "test": "jest"

35 },

36 "dependencies": {

37 "@adiwajshing/keyed-db": "^0.2.4",

38 "@cacheable/node-cache": "^1.4.0",

39 "@hapi/boom": "^9.1.3",

40 "@hapi/hoek": "^11.0.7",

41 "async-mutex": "^0.5.0",

42 "audio-decode": "^2.1.3",

43 "axios": "^1.3.3",

44 "cache-manager": "4.0.1",

45 "chalk": "^4.1.2",

46 "fflate": "^0.8.2",

47 "futoin-hkdf": "^1.5.1",

48 "libphonenumber-js": "^1.10.20",

49 "libsignal": "npm:@otaxayun/libsignal-node@latest",

50 "lodash": "^4.17.21",

51 "music-metadata": "^7.12.3",

52 "node-cache": "^5.1.2",

lib/VoIP/worker-bootstrap.jsView file

Lines 326-366javascript

326__modules["Promise"] = { exports: Promise };

327const bxFunc = function (id) { return id; };

328bxFunc.getURL = function

lib/VoIP/wasm-engine.jsView file

Lines 1-34javascript

1'use strict';

2

3/**

4 * WhatsApp VoIP WASM engine.

5 * Converted to CJS.

6 */

7

8const vm = require("node:vm");

9const

lib/assets/wasm/whatsapp.wasmView file

•path = lib/assets/wasm/whatsapp.wasm kind = wasm_module sizeBytes = 9819554 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/assets/wasm/whatsapp.wasmView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8472622 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

lib/Defaults/baileys-version.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/Defaults/baileys-version.jsonView on unpkg