Chrome Web StoreCaution required
Suspicious in code review (v1.2.88)
Our reviewer found behaviour consistent with malware in version 1.2.88, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
736 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
WA Bulk Message Sender, used by 200,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by unauthorized data collection. Its permissions mean it can inject scripts into pages.
Key findings
- Medium
Unauthorized Data Collection
The `getUserPermissioninfo` function retrieves user payment details (transaction ID, plan ID, price) and logs these sensitive financial data points to a remote Alibaba Cloud Log Service endpoint. This collection is not disclosed to the user in the Chrome Web Store privacy disclosure, which currently states no data is collected.
Analyst notes
The extension's core functionality of WhatsApp bulk messaging is legitimate and well-established with 200k users and high ratings. However, the source code reveals that payment transaction details (transaction_id, plan_id, price) are sent to a third-party Alibaba Cloud logging server via the ` ` module without any disclosure in the Chrome Web Store privacy practices, which currently state 'none declared'. This constitutes undisclosed data collection of financial transaction data, though it does not appear to involve exfiltration of WhatsApp user data.
WA Bulk Message Sender Chrome extension security report
ID: fhkimgpddcmnleeaicdjggpedegolbkb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://wawebsender.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
736 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Send targeted messages with a WA message sender designed for efficient bulk outreach from WA Web.
Read the publisher’s full description
Features ● Send personalized message, picture, video and document ● Send bulk WhatsApp message from excel ● Send to group members 1 by 1 ● Save your own WhatsApp promotion message template ● Customizable sending interval ● Current sending progress ● Pause and resume at any time ● Export sending result list ● One-click retry failed Try the safest wa sender, send bulk messages on WhatsApp and speed up your WhatsApp marketing now! If you like WA Bulk Message Sender, show us more love with a nice review. It really helps. WhatsApp is a trademark of WhatsApp Inc., registered in the U.S. and other countries. WA Bulk Message Sender is an independent project and has no relationship to WhatsApp or WhatsApp Inc.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
736 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from https://wawebsender.com/
Popular in lifestyle/social
- Skype3,000,000 users
- Skype Calling2,000,000 users
- Não Seguidores1,000,000 users
- Google Meet Tweak (Emojis, Text, Cam Effects)900,000 users
- VidyoWebConnector600,000 users