whatsapp-common-groups-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/common.js

This module behaves like a local forensic/enumeration CLI for WhatsApp credential-derived state. While it shows no direct malware techniques (no network exfiltration, no code execution, no persistence), it does read highly sensitive local credential/session-derived files and discloses inferred group membership and member enumerations via stdout, creating a meaningful privacy/abuse risk if distributed or misused. Overall risk is moderate-to-high due to the nature of the data it targets and outputs rather than overt compromise behavior.

Confidence: 72%Severity: 64%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:36 PM
Package URL
pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Fwhatsapp-common-groups-hardened%2F@24ac5e5bab680a3169feb706405547f7217c7184
Security Audit — socket — whatsapp-common-groups-hardened