PkgRadar

npm · registry.npmjs.org

@srlczinn/new-baileys

Install Lifecycle Remote Or Exec: preinstall="node ./engine-requirements.js"

Why PkgRadar flagged 7.0.0-rc.9-patch.1

SeveritySignalEvidence
highInstall Lifecycle Remote Or Execpreinstall="node ./engine-requirements.js" · package.json
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/lib/Utils/generics.js
mediumRemote Dependency Specdependencies.libsignal="git+https://github.com/whiskeysockets/libsignal-node.git" · package.json
mediumLarge Javascript Payload4435208 bytes · package/WAProto/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
7.0.0-rc.9-patch.1High risk692026-05-26
7.0.0-rc13-patch.1High risk572026-05-26

Related campaigns

Block this in CI

PkgRadar gates @srlczinn/new-baileys (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @srlczinn/[email protected]