whatsapp-utils-hardened
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalyscripts/utils.js
LOWAnomalyLOW
scripts/utils.js
No clear indicators of intentional malware (no network exfiltration, no persistence, no code execution capabilities) are present in this single file. However, it directly reads and exports sensitive personal contact data from a local WhatsApp contacts.json and prints it to stdout, and it can reveal credential-cache inventory metadata. This creates a meaningful privacy/data-leak risk if the CLI is run in environments where stdout is captured (logs/CI) or if upstream tooling misuses these outputs. Review intended use and ensure logging/outputs are controlled.
Confidence: 70%Severity: 55%
Audit Metadata