Chrome Web StoreNo malware found
In code review (v4.0.31)
Our reviewer read version 4.0.31 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
200 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Eazybe: Best WhatsApp Web with ChatGPT, used by 30,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by unauthorized data collection. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- Medium
Unauthorized Data Collection
exposes handlers that read full WhatsApp message bodies, group participants, profile images and attachment binaries out of the WhatsApp Web store, and the service worker uploads those results to the publisher's own backend at [domain withheld] (with companion / and / paths). The destination is first-party and conversation logging is the listing's advertised feature, but personal communications and contact media are not in the CWS-disclosed data-collection list, which declares only 'User activity' - so the collection exceeds what the publisher told Google it collects. Reported as an under-declared disclosure rather than covert exfiltration: nothing is encoded or sent to a third party.
Analyst notes
The 7-file bundle held only part of the signed extension (its lists,, and as missing, where every ML counter actually lives), so I also pulled and reviewed the real 4.0.31 CRX from corpus storage: is stock wppconnect wa-js v4.6.0, has no network sink at all, and every outbound destination is [domain withheld] (first-party), [domain withheld] under the manifest's declared OAuth scopes, the CRMs the listing exists to sync with, or SDKs - with no eval, no Function over fetched data, no remote script URLs (both script injections use chrome.runtime.getURL of bundled files), no chrome.cookies, no webRequest, and static func: references in all three executeScript calls. The two signals offered as corroboration both collapse: the malware label traces to the unverified 2026-09-13 malext-feed import with no affected version, and psql shows the 83-version permhash cluster is only two extension IDs, both Eazybe's own, so the '75 flagged malware' rows are this extension's own version history. Hygiene, not findings: fetches copilot label data from a hardcoded cleartext [domain withheld]> endpoint, and the manifest's externally_connectable [domain withheld] wildcard is defused in code by an allowlist of two message types plus a sender-hostname Set of the three [domain withheld] origins; I did not read all 9 MB line by line, hence medium confidence.
Eazybe: Best WhatsApp Web with ChatGPT Chrome extension security report
ID: clgficggccelgifppbcaepjdkklfcefd
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://eazybe.com
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://*.hubspot.com/*
- https://*.leadsquared.com/*
- https://app-na2.hubspot.com/ecosystem*
- https://app.hubspot.com/ecosystem/*
- https://app.hubspot.eu/ecosystem/*
200 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
WhatsApp extension with CRM integration (Hubspot, Zoho, Salesforce, Sheets), schedule WhatsApp, privacy blur, etc.
Read the publisher’s full description
Eazybe is the Chrome extension that brings WhatsApp Web and your CRM together. Connect WhatsApp with HubSpot, Zoho, Salesforce, or Google Sheets to streamline conversations, save time, and improve agent accountability — all while staying fully compliant with WhatsApp Business requirements. 💼 Designed for Sales, Customer Service & Account Management Whether you work in B2B or B2C, run a small team, are a solopreneur, or manage a large corporation, Eazybe turns WhatsApp into a professional tool for sales, customer support, and account managers. 🚀 What You Can Do with Eazybe 🔗 WhatsApp Integration with HubSpot Connect WhatsApp + HubSpot CRM (and other CRMs). Save conversations directly to CRM. Access contact info, deal stage, lead status, or lifecycle stage without leaving WhatsApp Web. 💬 Smarter Conversations Send 1:1 messages directly from CRM or browser. Use templates and tokens to personalize replies. Improve interactions with AI-powered reply suggestions. 👥 Team Productivity & Accountability Shared inbox with ownership tracking for better agent accountability. Assign conversations, manage tasks, and keep reports aligned. Create lists, automate workflows, and standardize communication. ⚡ Advanced Features Build automation with Meta Cloud API (secure and approved). Schedule follow-ups and reminders in WhatsApp. Generate reports for performance insights. Deploy in minutes — no learning curve, no hidden costs. 🔐 Privacy and Compliance End-to-end encryption: data stays on your device. 100% compliant with Meta’s policies. WhatsApp Business account required/recommended. Bulk messaging prohibited — built for quality, not spam. Not a contact center replacement; ideal for CRM-focused teams. 🌟 Benefits at a Glance Save time with automation and quick replies. Improve interactions with AI and structured workflows. Ensure privacy and compliance with no hidden risks. Scales from micro companies and solopreneurs to large corporations. 📞 Get Started Email us: hey@eazybe.com Book a demo: https://calendly.com/eazybe/eazybe-demo-call
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
200 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from https://eazybe.com
Popular in lifestyle/social
- Skype3,000,000 users
- Skype Calling2,000,000 users
- Google Meet Tweak (Emojis, Text, Cam Effects)900,000 users
- VidyoWebConnector600,000 users
- VK Music Saver — download music from VK500,000 users