whatsapp-common-groups-hardened
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalyscripts/common.js
LOWAnomalyLOW
scripts/common.js
This module behaves like a local forensic/enumeration CLI for WhatsApp credential-derived state. While it shows no direct malware techniques (no network exfiltration, no code execution, no persistence), it does read highly sensitive local credential/session-derived files and discloses inferred group membership and member enumerations via stdout, creating a meaningful privacy/abuse risk if distributed or misused. Overall risk is moderate-to-high due to the nature of the data it targets and outputs rather than overt compromise behavior.
Confidence: 72%Severity: 64%
Audit Metadata