npm yonzofficial-baileys @8.6.57
score
0.5749
med
flagged
2026-07-27 01:02
amplifiers
co-occurring signal pairs that lift the final score
- typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['preinstall'] present |
| topology | ||
| typosquat | 1.0 | combosquat of 'baileys' |
| shared_repo_different_publisher | 0.9 | repo 'git+ssh://git@github.com/WhiskeySockets/Baileys.git' also claimed by 10 package(s) under different publishers: ['npm/@pontaproject/baileys', 'npm/@rscrm/baileys', 'npm/@ryuu-reinzz/baileys'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 0
}
Evidence (package doc at flag time)
{
"dependencies_count": 11,
"dist": {
"integrity": "sha512-wR29K2eIzCrDiHTd+9kO4PJi3oscAMTGH8hURFu6lbhunBKJg+wlQldhBOFE6Pu/6wy7NRpYP20MWPejeUo5og==",
"tarball": "https://registry.npmjs.org/yonzofficial-baileys/-/yonzofficial-baileys-8.6.57.tgz",
"unpackedSize": 8460428
},
"dist-tags": {
"latest": "8.6.57"
},
"latest_version": "8.6.57",
"maintainers": [
{
"email": "kecedion39@gmail.com",
"name": "yonzofficiall"
}
],
"num_versions": 1,
"repository": {
"url": "git+ssh://git@github.com/WhiskeySockets/Baileys.git"
},
"scripts": {
"build": "tsc -P tsconfig.build.json && tsc-esm-fix --tsconfig=tsconfig.build.json --ext=.js",
"build:all": "npm run build && npm run build:docs",
"build:docs": "typedoc",
"changelog:last": "conventional-changelog -p angular -r 2",
"changelog:preview": "conventional-changelog -p angular -u",
"changelog:update": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0",
"example": "tsx ./Example/example.ts",
"format": "prettier --write \"src/**/*.{ts,js,json,md}\"",
"gen:protobuf": "sh WAProto/GenerateStatics.sh",
"lint": "tsc && eslint src --ext .js,.ts",
"lint:fix": "npm run format && npm run lint -- --fix",
"preinstall": "node ./engine-requirements.js",
"prepack": "npm run build",
"prepare": "npm run build",
"release": "release-it",
"test": "node --experimental-vm-modules ./node_modules/.bin/jest --testMatch '**/*.test.ts'",
"test:e2e": "NODE_TLS_REJECT_UNAUTHORIZED=0 node --experimental-vm-modules ./node_modules/.bin/jest --runInBand --forceExit --testMatch '**/*.test-e2e.ts'",
"update:version": "tsx ./scripts/update-version.ts"
},
"signal_details": {
"_amplifiers": [
"typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)"
],
"new_install_script": "first time ['preinstall'] present",
"shared_repo_different_publisher": "repo 'git+ssh://git@github.com/WhiskeySockets/Baileys.git' also claimed by 10 package(s) under different publishers: ['npm/@pontaproject/baileys', 'npm/@rscrm/baileys', 'npm/@ryuu-reinzz/baileys'] ...",
"typosquat": "combosquat of 'baileys'"
},
"time": {
"created": "2026-07-27T04:55:10.350Z",
"modified": "2026-07-27T04:55:10.863Z"
}
}