PkgRadar

npm · registry.npmjs.org

@nuisockets/baileys

Install Lifecycle Remote Or Exec: preinstall="node ./engine-requirements.js"

Why PkgRadar flagged 7.2.7

SeveritySignalEvidence
highInstall Lifecycle Remote Or Execpreinstall="node ./engine-requirements.js" · package.json
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/lib/Utils/generics.js
mediumLarge Javascript Payload4435208 bytes · package/WAProto/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
7.2.2Review112026-05-30
7.2.7High risk392026-05-27
7.2.8High risk392026-05-27
7.0.0High risk392026-05-25
7.2.1High risk572026-05-25

Related campaigns

Block this in CI

PkgRadar gates @nuisockets/baileys (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @nuisockets/[email protected]
@nuisockets/baileys — npm security scan | PkgRadar