
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
DiboSocketis a refined version of the Baileys library with cleaner API usage, exclusive features like album messaging, newsletter controls, and full-size profile uploads — tailored for modern WhatsApp automation needs.
package.json Fork Baileys (NPM)@whiskeysockets/baileys
"dependencies": {
"@whiskeysockets/baileys": "npm:dibosocket@latest"
}
@adiwajsing/baileys
"dependencies": {
"@adiwajshing/baileys": "npm:dibosocket@latest"
}
baileys
"dependencies": {
"baileys": "npm:dibosocket@latest"
}
Or via terminal
npm install npm:dibosocket@latest
Importing (for those who don't fork another repository)
ESM
import makeWASocket from 'dibosocket'
CJS
const { default: makeWASocket } = require('dibosocket')
| Category | Description |
|---|---|
| 📢 Channels | Seamlessly send messages to WhatsApp Channels. |
| 🖱️ Buttons | Create interactive messages with button options and quick replies. |
| 🖼️ Albums | Send grouped images or videos as an album (carousel-like format). |
| 👤 LID Grouping | Handle group operations using the latest @lid addressing style. |
| 🤖 AI Message Style | Add a stylized “AI” icon to messages. |
| 📷 HD Profile Pics | Upload full-size profile pictures without cropping. |
| 🔐 Pairing Code | Generate custom alphanumeric pairing codes. |
| 🛠️ Dev Experience | Reduced noise from logs with optimized libsignal printouts. |
// Create a newsletter
await sock.newsletterCreate("DiboSocket");
// Change description
await sock.newsletterUpdateDescription("dibosocket@newsletter", "Fresh updates weekly");
// Send a reaction to a channel message
await sock.newsletterReactMessage("dibosocket@newsletter", "175", "🔥");
const buttons = [
{ buttonId: 'btn1', buttonText: { displayText: 'Click Me' }, type: 1 },
{ buttonId: 'btn2', buttonText: { displayText: 'Visit Site' }, type: 1 }
];
const msg = {
text: "Choose one:",
footer: "From DiboSocket with love 💜",
buttons,
headerType: 1
};
await sock.sendMessage(id, msg, { quoted: null });
const media = [
{ image: { url: "https://example.com/pic1.jpg" } },
{ video: { url: "https://example.com/clip.mp4" } }
];
await sock.sendMessage(id, { album: media, caption: "Memories 💫" }, { quoted: null });
const code = await sock.requestPairingCode("62xxxxxxxxxx", "DIBO01");
console.log("Your Pairing Code:", code);
const pollMessage = {
name: "Favorite Color?",
values: ["Red", "Blue", "Green"],
selectableCount: 1
};
await sock.sendMessage(id, { poll: pollMessage });
const locationMessage = {
degreesLatitude: 37.422,
degreesLongitude: -122.084,
name: "Googleplex",
address: "1600 Amphitheatre Pkwy, Mountain View, CA 94043"
};
await sock.sendMessage(id, { location: locationMessage });
// Create group
const group = await sock.groupCreate("My New Group", [number1, number2]);
// Add participants
await sock.groupAdd(group.id, [number3, number4]);
// Change group description
await sock.groupUpdateDescription(group.id, "This is our awesome group!");
Note: Replace id with the actual recipient ID and sock with your WhatsApp socket connection variable.
Please open an issue at [ UNCOMING WEBSITE ] Or contact the maintainer directly via WhatsApp:
Terima kasih kepada pihak-pihak yang telah memberikan dukungan, inspirasi, dan kontribusi secara langsung maupun tidak langsung dalam pengembangan proyek ini:
Allah SWT
For all His grace and ease.
Parent
For your continued love, prayers, and support.
Nstar-Y / Nstar-bail
As an initial foundation and reference in the development of this system.
Muh. Deni Setiawan (Me)
The main developer of this project.
[!CAUTION] Built on top of the WhiskeySockets/Baileys project. All original core logic credits go to their team. Kriszz Bails extends it with thoughtful UX and DX improvements.
Thanks to the following awesome contributors who help improve this project 💖
|
Muh. Deni Setiawan |
RexxHayanasi |
nstar-y |
FAQs
Custom Baileys WhatsApp API
We found that dibosocket demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.