Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: Saipos Bot

HIGH RISK

Saipos Bot

ID: nhgfpmpjbdafjndlloieffmhiepcgegi

Supported Languages

🇧🇷Brazilian Portuguese

Extension Info & Metadata

Status

Active

Version

1.2.6

Size

0.70 MB

Rating

3.8/5

Reviews

Users

6,000

Type

Extension

Updated

Apr 23, 2026

Publisher Contextual Analysis

Author: [email protected]View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

O Saipos Bot é uma plataforma de automação que traz tecnologia e praticidade para o seu negócio.

Conheça a solução ideal para facilitar a gestão do seu estabelecimento. O Saipos Bot é uma plataforma de automação que traz tecnologia e praticidade para o seu negócio. Atender pelo whatsapp é realmente algo desafiador! Principalmente nos horários de pico, são vários clientes pedindo informações sobre seu cardápio, formas de pagamento e ainda por cima fazendo pedidos pelo whats 😱 Realmente é muito tempo que dá para ganhar na sua operação!

User Growth

Showing data from Jun 25, 2024 to Jun 24, 2025

Versions

No change in user count

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 4 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.6 Code review	6

Extension Version	Code Review Findings
1.2.6	6

Files with findings

4 distinct paths — top paths by unique finding count:

content.js3
services/blacklist.service.js1
services/feature-toggle.service.js1
services/listeners.service.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	content.js (line 401)	The WhatsApp user's own phone number (extracted from WhatsApp's internal localStorage) is automatically and silently POSTed to an external API at `api.saipos.com` on every page load. The returned authentication token …	1.2.6
2	Data Exfiltration	high	services/listeners.service.js (line 69)	Every WhatsApp message sent through the chatbot workflow is mirrored to `api-chatbot.saipos.com/send-message-firestore`, including the full message content and the recipient's phone number. This means all automated ch…	1.2.6
3	Unauthorized Data Collection	high	content.js (line 549)	The extension programmatically clicks the contact info header to open the WhatsApp info drawer, then scrapes the contact's phone number from the resulting DOM. This automated scraping of third-party customer phone num…	1.2.6
4	Data Exfiltration	medium	services/blacklist.service.js (line 19)	Customer phone numbers are exfiltrated to `api-chatbot.saipos.com/add-number-blacklist` whenever a conversation is paused. Combined with `getBlacklist` (which syncs the remote blacklist back on initialization), the ex…	1.2.6
5	Remote Code Loading	medium	services/feature-toggle.service.js (line 1)	The extension fetches a feature-toggle configuration file from a public AWS S3 bucket (`saipos-estatico-us.s3.amazonaws.com`) on every page load and uses it to gate behavior per store ID. If this S3 object were modifi…	1.2.6
6	Unauthorized Data Collection	medium	content.js (line 204)	The extension reads WhatsApp Web's internal localStorage key `last-wid-md` to extract the logged-in user's own phone number without any user prompt. This key is an internal WhatsApp Web implementation detail, not a do…	1.2.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


conta.saipos.com	-	https://conta.saipos.com/
meajuda.saipos.com	-	https://meajuda.saipos.com/
api.saipos.com	/v1	https://api.saipos.com/v1
api-release.tech-saipos.com.sbr	/v1	https://api-release.tech-saipos.com.sbr/v1
meajuda.saipos.com	-	https://meajuda.saipos.com
saiposchatbot.ngrok.io	-	https://saiposchatbot.ngrok.io
api-chatbot.saipos.com	-	https://api-chatbot.saipos.com
saipos-estatico-us.s3.amazonaws.com	/feature-toggle/config.json	https://saipos-estatico-us.s3.amazonaws.com/feature-toggle/config.json

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.7 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

A ferramenta, além de não ser eficiente pois mesmo em alguns casos ela estando pausada o robô ainda continua a responder ao cliente, nessa nova versão fica abrindo automaticamente a aba "Dados do Contato" em todos os contatos que tenho na minha agenda. Isso não acontece em contatos que converso e não estão na minha agenda. Um negócio irritante que era para facilitar a nossa vida e acaba trazendo aborrecimento.

Roberto Cordeiro·20 May 2026

trava direto. quando não trava é uma ótima solução. mas da muito problema

Dom Bacon Atendimento·6 Feb 2026

Gostei muito da solução, tem me ajudado nos atendimentos

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

Saipos Bot

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating