@bowozzz/baileys @9.9.9
Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:03 PM UTC
OSV ID
MAL-2026-11176
Ecosystem
npm
Summary
Package is a fork of the Baileys WhatsApp Web library. A single static pattern fired on lib/Utils/generics.js where the tokens 'ping' and 'GET' appear alongside identifier strings, matching a generic network+command keyword co-occurrence rule. In Baileys, 'ping' refers to the WhatsApp XMPP-style ping/keepalive stanza used to maintain the WebSocket connection, and 'GET' refers to protocol query types — not to OS ping execution or HTTP exfiltration. No install/postinstall lifecycle scripts, no top-level import-time network activity to attacker infrastructure, no reads of installer secrets (~/.aws, ~/.ssh, ~/.npmrc, browser stores), no credential-harvest fingerprint, and no hardcoded C2 destination were observed. The finding is consistent with a false-positive keyword match on the library's WhatsApp protocol code.
Source: amazon-inspector (4722e281a0d76eb608340d11a90f25453d5804124aebdd842b462fb03986891f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.