@neodevxsadmd/baileys-api-neko@2.0.3

Analysis

This package is a fork of the Baileys WhatsApp library that ships a dormant account-enrolment routine. In lib/Socket/newsletter.js it contains a commented-out timer block that, 90 seconds after the WhatsApp socket is created, calls the library's newsletter w:mex query with QueryIds.FOLLOW against a hardcoded channel JID decoded from the base64 literal MTIwMzYzMzAzNjU2NzkwMjAxQG5ld3NsZXR0ZXI= — i.e. 120363303656790201@newsletter. If enabled, that silently subscribes the WhatsApp account running the library to that channel without the user's consent; the 90-second delay places the action well after the library has loaded. The package's preinstall hook (node ./engine-requirements.js) only checks the Node.js major version and performs no network or file activity. No credential, token or environment-variable access is present in the shipped code.