my-auto-follow-eltio@1.0.0

Summary

npm package my-auto-follow-eltio@1.0.0 is a fork of the Baileys WhatsApp library. Two of its source files, lib/Socket/chats.js (~140 KB) and lib/Socket/dugong.js (~96 KB), use a custom base85-style string-array plus per-function decoder scheme to obfuscate their contents. After decoding, the logic corresponds to ordinary Baileys chats-socket operations and WhatsApp message-format builders (payment, product, interactive, album, event, poll). The preinstall script only performs a Node.js version gate and the main entry is a library factory with no top-level side effects. No hardcoded attacker-controlled endpoints, remote code fetch, credential or home-directory reads, browser/wallet secret access, silent-relay of caller data, or lifecycle-time execution of external content are present. The package name suggests an 'auto-follow' behavior that could act with the connected WhatsApp account's identity, but no such covert action is observable in the visible code paths, and the obfuscation of a Baileys fork is an unusual authorship/transparency signal on its own.

Source: amazon-inspector (f6f6e8fd17c3c20b0dd9889e9ce58ae2222c659d4af55e16024711c6c531b335)