Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: WAPI Sender

CRITICAL RISKRemoved from Chrome Web Store

WAPI Sender

ID: nmbjblpeeiobnakglbickhpgbinojbch

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.62

Size

5.93 MB

Rating

3.8/5

Reviews

Users

49,122

Type

Extension

Updated

Sep 25, 2023

Publisher Contextual Analysis

Trusted

Author: shuttershanti708View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

79,903

Use WhatsApp Automation Tool to connect with your customers by sending bulk messages.

Use WhatsApp Automation Tool to connect with your customers by sending bulk messages. Send WhatsApp Messages without saving numbers using WA Sender Application - the best WhatsApp Marketing Software & Automation Tool. Connect with your customers on WhatsApp. Grow your business with WAPI - Send personalized messages. Features: ● A free WhatsApp Auto Message Sender ● A google chrome extension based on WhatsApp Web ● Send automated, customized, bulk, WA messages ● Upload excel file with WhatsApp numbers ● Download WhatsApp numbers excel file demo ● Save message text as template ● Send attachments via WhatsApp auto sender ● Offer an option to unsubscribe ● Use placeholders to send personalized messages ● Random send interval for WhatsApp bulk sender ● Safe group sending interval ● Export selected group members ● Real-time sending progress ● Export WhatsApp sender results ● Stop WhatsApp auto sending at any time ● Send WhatsApp contact card in bulk 🚀 WAPI - Send personalized messages is the ultimate WAMessages, Premium Sender, Web Sender, Whats Direct Message, WA Self Sender, WAppSenderPro. Just send WhatsApp messages to all contacts including contacts not saved in your address book with a click. Try WA Web plus features for free and start saving time now! 🚀 Kindly do not use for SPAMMING which is WhatsApp™ strictly prohibited. WhatsApp is a trademark of WhatsApp Inc., registered in the U.S. and other countries. WAPI - Send personalized messages is an independent project and has no relationship to WhatsApp or WhatsApp Inc.

User Growth

Showing data from Aug 02, 2022 to Aug 01, 2023

Versions

+51.86%(+16,776 users)

Compared to 3 months ago

44 versions released in this period

Rating Count

Total: 64 ratings+33 (106%)

Average Rating

Current: 3.75 / 5.0+3.75

Item	Type	Severity	Description
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
://.whatsapp.com/*	Host	Medium	Host permission — access limited to this URL pattern.

By severity

Critical2

High6

Medium1

Low0

Versions scanned

Showing 1 of 48 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	9

Extension Version	Code Review Findings
1.0.0	9

Files with findings

2 distinct paths — top paths by unique finding count:

js/inject/content-script.js6
js/background.js3

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/inject/content-script.js (line 9820)	Every outbound WhatsApp message is logged to a remote analytics endpoint together with `s_content` (the actual message body sent to the recipient) and `s_target_phone` (recipient's phone number). This exfiltrates priv…	1.0.0
2	Data Exfiltration	critical	js/inject/content-script.js (line 3050)	Embeds an Aliyun Simple Log Service (SLS) client hard-coded to ship protobuf/lz4-compressed batches of user telemetry to `https://extension-us.us-west-1.log.aliyuncs.com/logstores/scrm-user/track`. Batch size is 1 wit…	1.0.0
3	Data Exfiltration	high	js/background.js (line 1893)	Background service worker also instantiates the same Aliyun SLS logger targeting `extension-us.us-west-1.log.aliyuncs.com/logstores/scrm-user`, duplicating the exfiltration channel on the privileged (service-worker) s…	1.0.0
4	Other	high	js/inject/content-script.js (line 9881)	Automates WhatsApp Web by iterating over phone-number lists and programmatically synthesising input/click events (setting `.innerHTML` on the composer, dispatching UIEvents/MouseEvents) to send messages without user i…	1.0.0
5	Privilege Escalation	high	js/inject/content-script.js (line 9765)	Content script dynamically injects `inject.js` as a <script> tag into the WhatsApp Web page DOM so it runs in the page's main world with access to WhatsApp's internal Store/WAPI object. This bypasses content-script is…	1.0.0
6	Remote Code Loading	high	js/background.js (line 10623)	On every content-script init and on install/update, the background worker POSTs the extension ID to `https://waplus.io/user/api-chrome-extension/get-remote-config` and stores the raw JSON response in `chrome.storage.l…	1.0.0
7	Tracking	high	js/background.js (line 10679)	Builds an uninstall survey URL that embeds the user's WhatsApp phone number (`utm_source=<phone>`), inferred country, install timestamp, a per-install UUID, and the extension version as plaintext query parameters on `…	1.0.0
8	Unauthorized Data Collection	high	js/inject/content-script.js (line 10225)	Reads the logged-in WhatsApp user's own phone number from WhatsApp Web's localStorage (`last-wid` / `last-wid-md`), persists it in extension storage, and forwards it to the background service worker. This is unauthori…	1.0.0
9	Tracking	medium	js/inject/content-script.js (line 72)	Bundles the `universal-analytics` SDK pointed at `https://www.google-analytics.com/collect` and is initialised with tracking ID `UA-140648082-17` (see line 9765: `i()("UA-140648082-17")`). Runs inside a content script…	1.0.0

URLs

419

IPv4

267

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.


www.google-analytics.com	/g/collect	https://www.google-analytics.com/g/collect
wajs-server.calixto.shop	-	https://wajs-server.calixto.shop
wajsapi.titanchat.com.br	-	https://wajsapi.titanchat.com.br
wppc-linkpreview.cloudtrix.com.br	-	https://wppc-linkpreview.cloudtrix.com.br
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
wawebsender.com	-	https://wawebsender.com/
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
wadesk.io	/whatsapp-crm	https://wadesk.io/whatsapp-crm?utm_source=wapi

Showing 1 to 10 of 420 rows

Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.


127.0.0.1	IPv4	-
19.1.2.1	IPv4	-
21.1.3.27	IPv4	-
21.1.5.2	IPv4	-
22.4.2.4	IPv4	-
2.3.3.1	IPv4	-
2.3.3.2	IPv4	-
2.5.97.2	IPv4	-
9.3.2.2	IPv4	-
15.2.12.3	IPv4	-
15.2.12.2	IPv4	-
22.4.2.32	IPv4	-
2.3.7.6	IPv4	-
2.3.7.8	IPv4	-
2.3.7.2	IPv4	-
2.3.7.9	IPv4	-
2.3.7.1	IPv4	-
18.3.1.15	IPv4	-
2.1.7.45	IPv4	-
2.1.6.1	IPv4	-
2.1.6.2	IPv4	-
2.3.4.5	IPv4	-
2.3.4.6	IPv4	-
2.3.4.10	IPv4	-
2.3.5.1	IPv4	-
2.3.6.1	IPv4	-
2.3.7.3	IPv4	-
18.3.1.13	IPv4	-
2.1.7.50	IPv4	-
20.1.6.2	IPv4	-
20.1.2.3	IPv4	-
20.1.4.1	IPv4	-
20.1.6.10	IPv4	-
20.1.6.9	IPv4	-
2.6.4.1	IPv4	-
2.1.7.25	IPv4	-
20.5.2.35	IPv4	-
20.5.2.1	IPv4	-
20.5.2.16	IPv4	-
20.1.2.2	IPv4	-
5.2.1.2	IPv4	-
19.4.2.3	IPv4	-
2.1.7.8	IPv4	-
2.5.198.105	IPv4	-
2.5.97.89	IPv4	-
2.5.97.90	IPv4	-
2.5.198.109	IPv4	-
2.5.97.91	IPv4	-
2.5.198.107	IPv4	-
2.5.198.111	IPv4	-
2.5.97.92	IPv4	-
2.5.198.27	IPv4	-
2.5.97.18	IPv4	-
2.5.198.28	IPv4	-
2.5.97.19	IPv4	-
2.5.198.29	IPv4	-
2.5.97.20	IPv4	-
2.5.198.30	IPv4	-
2.5.97.21	IPv4	-
2.5.198.31	IPv4	-
2.5.97.22	IPv4	-
2.5.198.32	IPv4	-
2.5.97.23	IPv4	-
2.5.198.33	IPv4	-
2.5.97.24	IPv4	-
2.5.198.34	IPv4	-
2.5.97.25	IPv4	-
2.5.198.35	IPv4	-
2.5.97.26	IPv4	-
2.5.198.36	IPv4	-
2.5.97.27	IPv4	-
2.5.97.28	IPv4	-
2.5.198.37	IPv4	-
2.5.97.29	IPv4	-
2.5.198.40	IPv4	-
2.5.97.32	IPv4	-
2.5.198.38	IPv4	-
2.5.97.30	IPv4	-
2.5.198.39	IPv4	-
2.5.97.31	IPv4	-
2.5.198.84	IPv4	-
2.5.97.68	IPv4	-
2.5.198.88	IPv4	-
2.5.97.72	IPv4	-
2.5.198.85	IPv4	-
2.5.97.69	IPv4	-
2.5.198.62	IPv4	-
2.5.97.45	IPv4	-
2.5.198.63	IPv4	-
2.5.97.46	IPv4	-
2.5.198.41	IPv4	-
2.5.97.33	IPv4	-
2.5.198.58	IPv4	-
2.5.97.40	IPv4	-
2.5.198.57	IPv4	-
2.5.97.39	IPv4	-
2.5.198.66	IPv4	-
2.5.97.49	IPv4	-
2.5.198.42	IPv4	-
2.5.97.34	IPv4	-
2.5.198.79	IPv4	-
2.5.97.63	IPv4	-
2.5.198.89	IPv4	-
2.5.97.74	IPv4	-
2.5.192.112	IPv4	-
2.5.192.11	IPv4	-
2.5.97.93	IPv4	-
2.5.97.9	IPv4	-
2.5.198.61	IPv4	-
2.5.97.44	IPv4	-
2.5.198.59	IPv4	-
2.5.97.41	IPv4	-
2.5.198.76	IPv4	-
2.5.97.60	IPv4	-
2.5.198.77	IPv4	-
2.5.97.61	IPv4	-
2.5.198.70	IPv4	-
2.5.97.54	IPv4	-
2.5.198.72	IPv4	-
2.5.97.56	IPv4	-
2.5.198.86	IPv4	-
2.5.198.87	IPv4	-
2.5.97.71	IPv4	-
2.5.198.71	IPv4	-
2.5.97.55	IPv4	-
2.5.198.73	IPv4	-
2.5.97.57	IPv4	-
2.5.198.92	IPv4	-
2.5.198.46	IPv4	-
2.5.198.47	IPv4	-
2.5.198.48	IPv4	-
2.5.198.49	IPv4	-
2.5.198.50	IPv4	-
2.5.198.51	IPv4	-
2.5.198.52	IPv4	-
2.5.198.53	IPv4	-
2.5.198.54	IPv4	-
2.5.198.55	IPv4	-
2.5.97.52	IPv4	-
2.5.198.91	IPv4	-
2.5.97.76	IPv4	-
2.5.198.25	IPv4	-
2.5.97.16	IPv4	-
2.5.198.103	IPv4	-
2.5.97.87	IPv4	-
2.5.198.104	IPv4	-
2.5.97.88	IPv4	-
2.5.198.93	IPv4	-
2.5.198.95	IPv4	-
2.5.198.81	IPv4	-
2.5.198.26	IPv4	-
2.5.198.43	IPv4	-
2.5.198.45	IPv4	-
2.5.198.56	IPv4	-
2.5.198.64	IPv4	-
2.5.198.65	IPv4	-
2.5.198.68	IPv4	-
2.5.198.69	IPv4	-
2.5.198.75	IPv4	-
2.5.198.78	IPv4	-
2.5.198.82	IPv4	-
2.5.198.90	IPv4	-
2.5.198.67	IPv4	-
2.5.198.94	IPv4	-
2.5.198.83	IPv4	-
2.5.198.80	IPv4	-
2.5.198.74	IPv4	-
2.5.198.1	IPv4	-
2.5.198.3	IPv4	-
2.5.198.21	IPv4	-
2.5.198.118	IPv4	-
2.5.97.1	IPv4	-
2.5.97.4	IPv4	-
2.5.97.8	IPv4	-
2.5.97.12	IPv4	-
2.5.97.98	IPv4	-
2.5.198.4	IPv4	-
2.5.198.17	IPv4	-
2.5.97.10	IPv4	-
18.3.1.99	IPv4	-
18.3.1.82	IPv4	-
18.3.1.35	IPv4	-
18.3.1.88	IPv4	-
18.3.1.17	IPv4	-
18.3.1.80	IPv4	-
18.3.1.2	IPv4	-
18.3.1.55	IPv4	-
18.3.1.48	IPv4	-
18.3.1.62	IPv4	-
18.3.1.85	IPv4	-
18.3.1.87	IPv4	-
18.3.1.73	IPv4	-
18.3.1.4	IPv4	-
2.1.7.61	IPv4	-
21.2.2.150	IPv4	-
21.2.2.71	IPv4	-
21.2.2.27	IPv4	-
21.2.2.120	IPv4	-
18.3.1.12	IPv4	-
18.3.1.83	IPv4	-
18.3.1.36	IPv4	-
2.1.7.7	IPv4	-
2.1.7.20	IPv4	-
3.1.3.2	IPv4	-
4.3.2.7	IPv4	-
10.4.6.2	IPv4	-
7.3.6.2	IPv4	-
7.3.6.3	IPv4	-
7.3.6.4	IPv4	-
7.3.6.5	IPv4	-
7.3.6.6	IPv4	-
7.3.6.7	IPv4	-
7.3.6.8	IPv4	-
7.3.6.9	IPv4	-
7.3.6.10	IPv4	-
7.3.6.11	IPv4	-
7.3.6.12	IPv4	-
7.3.6.13	IPv4	-
7.3.6.14	IPv4	-
7.3.6.15	IPv4	-
7.3.6.16	IPv4	-
7.3.7.1	IPv4	-
7.3.7.2	IPv4	-
2.3.4.1	IPv4	-
2.3.4.2	IPv4	-
2.3.4.3	IPv4	-
2.3.4.4	IPv4	-
4.4.17.1	IPv4	-
25.1.2.1	IPv4	-
19.1.2.7	IPv4	-
15.2.3.4	IPv4	-
22.1.3.4	IPv4	-
22.1.3.13	IPv4	-
22.1.3.29	IPv4	-
22.1.3.30	IPv4	-
22.1.5.2	IPv4	-
9.4.4.6	IPv4	-
9.4.4.7	IPv4	-
19.4.1.1	IPv4	-
19.4.2.2	IPv4	-
19.4.2.4	IPv4	-
19.4.2.6	IPv4	-
19.4.2.8	IPv4	-
19.4.2.9	IPv4	-
19.4.2.10	IPv4	-
19.4.2.11	IPv4	-
19.4.2.12	IPv4	-
19.4.2.13	IPv4	-
19.4.2.14	IPv4	-
19.4.2.1	IPv4	-
19.4.2.5	IPv4	-
19.1.2.2	IPv4	-
19.1.2.4	IPv4	-
19.1.2.3	IPv4	-
19.1.2.6	IPv4	-
19.1.2.8	IPv4	-
19.4.3.4	IPv4	-
19.4.3.5	IPv4	-
20.2.1.9	IPv4	-
15.2.3.5	IPv4	-
19.1.2.14	IPv4	-
15.2.3.14	IPv4	-
13.3.3.7	IPv4	-
19.1.2.9	IPv4	-
15.2.3.2	IPv4	-
19.1.3.1	IPv4	-
4.2.1.2	IPv4	-

Showing 1 to 267 of 270 rows

Rows per page:

4.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I tried it, and it stopped working with every WhatsApp update, not to mention the terrible customer support. It's also very limited as well. Eventually, I switched to Wassenger, which is cloud-based and operates reliably and I couldn't be happier.

Jaime J·6 Oct 2023

I got the paid version and asked them to send activation code for pro version after successful payment and they say to use an old one that no longer works. I have 2 days trying to contact them but no solution.

Stefania K·7 Sept 2023

It's a very useful tool.

Version	Size	Is Malicious	Findings	Permhash
1.4.61 Latest	5.93 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.60	5.97 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.59	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.58	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.57	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.56	5.93 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.55	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.54	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.53	5.91 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77
1.4.52	5.92 MB	Malicious	—	206327c821de23397fa3bf07c35dc6e0da40888e32a431a579305311a003bc77

Showing 1 to 10 of 50 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Security Alert: Confirmed Malware

WAPI Sender

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Manifest File Security Analysis

Code Review Findings Summary Across 48 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating