Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: WA Sender Free Bulk Messaging

CRITICAL RISKRemoved from Chrome Web Store

WA Sender Free Bulk Messaging

ID: cankiolpkhdphjffldgoiaomhmgdpiig

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.14

Size

2.13 MB

Rating

3.2/5

Reviews

Users

127,890

Type

Extension

Updated

Sep 2, 2022

Publisher Contextual Analysis

Trusted

Author: wasender biz pluginView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

127,890

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Create Whatsapp Groups in a single click. Share single or multiple customizable messages to your contacts

Free ✅ Messaging (no limits*) ✅ Excel upload ✅ Privacy features ✅ Pin unread chats to top PRO ✅ Attachment Sending ✅ Name personalized bulk Messaging ✅ Setting time gap between messages ✅ Download _Msg Sent/failed reports_ ✅ Create your own Chatbot on WhatsApp web ⬇️ One-click instant download for all types of contacts ✅ All groups contacts ✅ All labels contacts ✅ All broadcast lists contacts ✅ All chat contacts ✅ All contacts 👨‍💻 Chat/WhatsApp/Call support DISCLAIMER This tool is not a part of WhatsApp© or Facebook©. The information on this tool is for educational purpose only, we neither support nor be help responsible for any misuse of this info. This tool is not affiliated with any brand or website. User must use the software responsibly and adhere to the website terms or usage policy (or whatever applicable). Its just a standalone tool to facilitate and extend some options in WhatsApp. Its not a spam tool and not allowed to use it for spamming or violating WhatsApp policies. This tool automates a natural human's behavior to save peopl's time in daily us We do not take responsibility on how the buyer uses this software. This is an automation tool intended to save time doing repetitive actions. All disputes subject to Mumbai jurisdiction.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+42.1%(+37,890 users)

Compared to 3 months ago

9 versions released in this period

Rating Count

Total: 13 ratings

Average Rating

Current: 3.23 / 5.0+3.23

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low1

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	5

Extension Version	Code Review Findings
1.0.0	5

Files with findings

2 distinct paths — top paths by unique finding count:

backgroundmin.js4
flmin.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	backgroundmin.js (line 3811)	The logSingleMsgDetail (E) and logBulkMessageDetail (S) functions POST the actual WhatsApp message text and recipient phone number(s) to https://us-central1-waplugin-34798.cloudfunctions.net/stats/singlemsg and /stats…	1.0.0
2	Unauthorized Data Collection	high	backgroundmin.js (line 3859)	The logLogin function transmits the user's WhatsApp display name, phone number, and referral ID to the developer's Firebase logLogin endpoint on every authentication event. The logLoginFailed function similarly sends …	1.0.0
3	Other	medium	flmin.js (line 8234)	The content library uses a 'parasite' webpack module injection pattern to enumerate all of WhatsApp Web's internal JavaScript modules and extract the internal Store object, then patches sendMessagePrototype. This give…	1.0.0
4	Unauthorized Data Collection	medium	backgroundmin.js (line 3886)	The saveTemplates function uploads the full set of user message templates to the developer's Firebase stats/templates endpoint. Message templates may contain personal names, business content, or sensitive promotional …	1.0.0
5	Tracking	low	backgroundmin.js (line 5093)	On install, the extension queries http://ip-api.com/json (a third-party geolocation service) to determine the user's country code. This leaks the user's IP address to a third-party analytics provider. The request uses…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

131

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


us-central1-waplugin-34798.cloudfunctions.net	-	https://us-central1-waplugin-34798.cloudfunctions.net
ip-api.com	/json	http://ip-api.com/json
web.whatsapp.com	-	https://web.whatsapp.com
wasender.com	/installed	https://wasender.com/installed
wasender.com	/uninstall/	https://wasender.com/uninstall/?utm_source=chrome_extension&utm_medium=referral&utm_campaign=uninstall_intimation
wasender.com	/uninstall/	https://wasender.com/uninstall/?utm_source=chrome_extension&utm_medium=referral&utm_campaign=uninstall_intimation&name=${e.data.name}&phonenumber=${e.data.phoneNumber}`
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
github.com	/mholt/PapaParse	https://github.com/mholt/PapaParse
lodash.com	-	https://lodash.com/

Showing 1 to 10 of 140 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


3.3.6.7	IPv4	-

2.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

goooooooooooooooooooooooooooooooooooooooooooooooood

Manpreet Singh·23 Nov 2022

NOT WORK PROPERLY ONLY WRONG NUMBER ERROR SHOW

Jaydeep Rathod·22 Nov 2022

NOW ITS NOT WORKING NOW ERROR SHOWING ONLY PLEASE FIX THIS ERROR

Nitin Rawat·20 Nov 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

WA Sender Free Bulk Messaging

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating