registry / Malware / zero2-baileys

zero2-baileys

WhatsApp API - NEW APDETE BAILEYS ZEROZ Edition

This report shows the evidence for zero2-baileys@3.6.0. 1 of 2 known versions is blocked or flagged. See all versions.

This package appears in our research on the malicious Baileys forks, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 21h ago · by lpm-firewall-ai

The active runtime path performs publisher-selected account actions without user invocation or a consent guard. This is concrete malicious behavior, so publication should be blocked.

Static reason

One or more suspicious static signals were detected.

Trigger

A consumer creates the exported WhatsApp socket.

Impact

The connected account is subscribed to newsletters the consumer did not select.

Mechanism

The socket setup sends two follow queries for package-selected newsletter IDs after a 90-second delay, with no user action or consent check in this path.

Attack narrative

The exported socket factory reaches newsletter socket construction. That constructor schedules two follow operations for fixed newsletter IDs after 90 seconds; the requests use the WhatsApp query path and the package’s follow action identifier. This changes the connected account’s subscriptions without a caller-requested target.

AI rationale

The active runtime path performs publisher-selected account actions without user invocation or a consent guard. This is concrete malicious behavior, so publication should be blocked.

Evidence

package.jsonlib/index.jslib/Socket/index.jslib/Socket/registration.jslib/Socket/business.jslib/Socket/messages-recv.jslib/Socket/messages-send.jslib/Socket/newsletter.jslib/Types/Newsletter.js

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json sets lib/index.js as the package entry point.
lib/index.js exports the socket factory.
The socket factory constructs registration, business, receive, and send layers.
The send layer creates the newsletter socket during construction.
The newsletter query sends a follow action to WhatsApp with a supplied newsletter ID.
Socket construction schedules follows of two fixed newsletter IDs after 90 seconds.
The package maps the follow action to its newsletter protocol query ID.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

GitDependency

scanned 120 file(s), 2.62 MB of source, external domains: a2ui.org, emscripten.org, faq.whatsapp.com, fburl.com, link.id, raw.githubusercontent.com, v.whatsapp.net, web.whatsapp.com, www.internalfb.com

Source & flagged code

7 flagged

package.jsonView file

Lines 14-54json

14 "main": "lib/index.js",

15 "types": "lib/index.d.ts",

16 "files": [

17 "lib/**/*",

18 "WAProto/**/*",

19 "engine-requirements.js",

20 "README.md",

21 "LICENSE"

22 ],

23 "scripts": {

24 "build:all": "tsc && typedoc",

25 "build:docs": "typedoc",

26 "build:tsc": "tsc",

27 "changelog:last": "conventional-changelog -p angular -r 2",

28 "changelog:preview": "conventional-changelog -p angular -u",

29 "gen:protobuf": "sh WAProto/GenerateStatics.sh",

30 "lint": "eslint src --ext .js,.ts,.jsx,.tsx",

31 "lint:fix": "eslint src --fix --ext .js,.ts,.jsx,.tsx",

32 "prepack": "",

33 "prepare": "",

34 "preinstall": "",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L34

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L34

35 "release": "release-it",

36 "test": "jest"

37 },

38 "dependencies": {

39 "@adiwajshing/keyed-db": "^0.2.4",

40 "@cacheable/node-cache": "^1.4.0",

41 "@hapi/boom": "^9.1.3",

42 "@hapi/hoek": "^11.0.7",

43 "async-mutex": "^0.5.0",

44 "audio-decode": "^2.1.3",

45 "axios": "^1.3.3",

46 "cache-manager": "4.0.1",

47 "chalk": "^4.1.2",

48 "fflate": "^0.8.2",

49 "futoin-hkdf": "^1.5.1",

50 "libphonenumber-js": "^1.10.20",

51 "libsignal": "npm:@otaxayun/libsignal-node@latest",

52 "lodash": "^4.17.21",

53 "music-metadata": "^7.12.3",

54 "node-cache": "^5.1.2",

lib/VoIP/worker-bootstrap.jsView file

Lines 326-366javascript

326__modules["Promise"] = { exports: Promise };

327const bxFunc = function (id) { return id; };

328bxFunc.getURL = function

lib/VoIP/wasm-engine.jsView file

Lines 1-34javascript

1'use strict';

3/**

4 * WhatsApp VoIP WASM engine.

5 * Converted to CJS.

6 */

8const vm = require("node:vm");

9const

lib/assets/wasm/whatsapp.wasmView file

•path = lib/assets/wasm/whatsapp.wasm kind = wasm_module sizeBytes = 9819554 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/assets/wasm/whatsapp.wasmView on unpkg

WAProto/GenerateStatics.shView file

•path = WAProto/GenerateStatics.sh kind = build_helper sizeBytes = 301 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

WAProto/GenerateStatics.shView on unpkg

WAProto/index.jsView file

•path = WAProto/index.js kind = oversized_source_file sizeBytes = 8472622 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

WAProto/index.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.preinstall =

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall =

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/VoIP/worker-bootstrap.jsView file

346const code = fs.readFileSync(url, "utf8"); L347: eval(code); L348: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/VoIP/worker-bootstrap.jsView on unpkg · L346

Findings

1 High9 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumUnsafe Vm Contextlib/VoIP/wasm-engine.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulelib/assets/wasm/whatsapp.wasm

MediumShips Build HelperWAProto/GenerateStatics.sh

MediumOversized Source FileWAProto/index.js

MediumStructural Risk Force Deep Review

MediumGit Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvallib/VoIP/worker-bootstrap.js

LowFilesystem

Low

Affected versions and remediation

This report applies to zero2-baileys@3.6.0.

The versions list below shows the verdict for each recorded version.

Avoid installing zero2-baileys@3.6.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-22 03:36:59.375Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

3.6.0latestshownMaliciousMalwareBlockPublishedOct 21, 2026, 2:53 PM 0.0.0-stageUnknown—AllowUnder ReviewOct 21, 2026, 2:49 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages

Source & flagged code