Chrome Web StoreDo not install
Code review: high (v3.2.307)
Our reviewer read version 3.2.307 of this extension and confirmed malicious behaviour. 4 security findings documented below. Do not install it. Remove it if you already have it.
34 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
WAPI FREE - Jaguar, used by 100,000 people, is rated malicious by Extension Auditor. Our code review reported 4 findings (3 high, 1 medium), led by other. Its permissions mean it can inject scripts into pages.
Key findings
- High
Other
The bundled manifest requests extensive host permissions ([domain withheld], [domain withheld], [domain withheld]) not listed in the published Chrome Web Store summary, which shows only '[domain withheld]' and '[domain withheld]'. This discrepancy may indicate unreported access to external services.
- High
Tracking
Injects a Facebook Pixel into the WhatsApp Web page without any user consent or disclosure. This silently sends user browsing data to Facebook's advertising network, which is a serious privacy violation.
- High
Unauthorized Data Collection
Collects device fingerprinting data (device ID, timezone, language, user agent) and sends it to an external Google Apps Script ([domain withheld]) for tracking, despite the extension declaring no data collection in the CWS listing.
- Medium
Other
Fetches a remote JSON file from an external GitHub repository to determine license status, creating a dependency on an external server that could disable or alter extension behavior without user knowledge.
Analyst notes
The extension includes a Facebook Pixel for tracking users without any disclosure (CWS says 'none declared'), collects device fingerprinting data (device ID, timezone, language, user agent) and sends it to an external Google Apps Script, and has a host_permissions mismatch between the bundled and published manifests. These covert data practices exceed the extension's stated purpose and constitute unauthorized data collection and tracking.
WAPI FREE - Jaguar Chrome extension security report
ID: cgnhpniejimbnmgiccckgiaejdgbeebb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- wapi7.com
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
34 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Send personalized messages to your clients with our extension .
Read the publisher’s full description
Best WA Sender Application - FREE * Send messages to unlimited numbers * Support : images, videos, documents .. * Random Delay between messages * Import numbers fron .CSV file * Support Variables WAPI ★ WAPI allows you to send automated, customized, bulk, WA messages. By doing this, you can have meaningful conversations with your clients and target audience thereby growing your business. ★ No more one by one sending off messages to all your customers. ★ No more sending of common messages to your prominent users. HOW TO USE WAPI 1. Install the extension! 2. Open WA Web in a new tab and click on the icon in top right 3. Upload CSV 4. Personalize your Message with [name] variable 5. Attach a File (photo, video, document …) 6. Hit Prepare 7. Hit Send LEGAL WAPI is a trademark of WhatsApp Inc. , registered in the U.S. and other countries. This Chrome extension is not endorsed or certified by WhatsApp Inc. This is an unofficial enhancement for WAPI. https://www.wapi7.com/terms
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
34 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from wapi7.com
- WAPI PREMIUM - Jaguar10,000 users
- WAPI Extractor5,000 users
Popular in Social Networking
- Cisco Webex Extension22,000,000 users
- Mosaic Wallet4,000,000 users
- LINE4,000,000 users
- Google Mail Checker2,000,000 users
- Bitmoji2,000,000 users