Chrome Web StoreCaution required
Suspicious in code review (v7.4.3.55)
Our reviewer found behaviour consistent with malware in version 7.4.3.55, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
Whats Expert is rated caution by Extension Auditor. Our code review reported 3 findings (3 high), led by remote code loading. It comes from a publisher with 20 extensions and was last updated in October 2026.
Key findings
- High
Remote Code Loading
The config object explicitly names `remote_code` (commented 'URL do código remoto') pointing to `[domain withheld]. This URL is fetched every 10 minutes and also used by the 'inject-code' handler to supply content scripts with a remote code URL. This gives the publisher server-side control over extension behaviour on WhatsApp Web without issuing a new CWS-reviewed build — a classic remote backdoor pattern. The comment and variable name leave no ambiguity about the intended purpose.
- High
Remote Code Loading
Every 10 minutes (via the 'Ten_Minutes' chrome.alarms alarm) the background script GETs `[domain withheld] and forwards the entire parsed JSON payload to every WhatsApp Web content-script tab under the message key 'Update_DomSelector'. Because the primary content-script bundle (the file referenced in) is absent from this extraction, the consumer of that message cannot be audited — but the infrastructure for receiving server-controlled configuration on a recurring basis is confirmed. The `remote_code` property of that config is separately extracted and passed to content scripts in the `inject-code` flow, indicating it is a URL for dynamic script loading.
- High
Remote Code Loading
Function `v()` is invoked whenever any internal sender dispatches a `{message: 'inject-code'}` event. It calls `f()` to obtain the remote config and specifically destructures `remote_code` — a URL that the missing primary content script is expected to receive and dynamically execute on the WhatsApp Web page. The error string 'MODULO_EXTERNAL_NOT_INITIALIZED_IN_BACKGROUND' confirms this is the entry point for loading a remote module. Combined with the absent main content chunk, this is the plausible execution path for the WaSteal payload.
Analyst notes
The extension's contains an explicit remote code loading system: it fetches `[domain withheld] every 10 minutes (via a recurring alarm), pushes the full response to WhatsApp Web content scripts as 'Update_DomSelector', and exposes an 'inject-code' message handler (`v()`) that extracts a `remote_code` URL from this config for content-script injection — the variable is literally commented 'URL do código remoto'. The primary content script chunk (` `) referenced in is absent from the extracted bundle, which is exactly where the remote code would be executed against WhatsApp Web. Corroborating signals include: an internal IoC tagging this as the 'WaSteal' malware family ([domain withheld]), a permhash cluster where 93% of peer extensions are flagged as malware, and a recorded publisher ownership change; the publisher's otherwise-clean extension portfolio ( malicious) slightly counterweighs but is consistent with a supply-chain hand-off scenario.
Whats Expert Chrome extension security report
ID: gnmmfdohfcohcflccikmlodaeignlkce
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- ewdht
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Email Change History
Screenshots & videos
Install growth
About this extension
Whats Expert é um CRM para WhatsApp Web. Organize seus chats e otimize seus negócios no WhatsApp Web
Read the publisher’s full description
Com novas funcionalidades para WhatsApp web, você pode ter mais controle sobre seus leads além de prospectar mais clientes com envios em massa e exportação de contatos na Whats Expert. Crie um verdadeiro funil de CRM para vender mais. Características: ✔ Envio em massa para seus contatos ou contatos importados por CSV ✔ Crie Abas personalizadas, encontre facilmente seus contatos importantes Visão Kanban dos contatos do WhatsApp organize seus leads ✔ Envie mensagens para um número que não esteja na sua agenda ✔ Crie notas para cada contato dentro do contato ✔ Você tem que ligar de volta? Crie lembretes para cada contato ✔ Agende Reuniões no google agenda direto ✔ Crie lembretes de forma simples e seja notificado ✔ Crie um banco de respostas rápidas para enviar com um clique ✔ Exporte todos seus contatos ou contatos de grupos ✔ Use em seu idioma nativo (português, espanhol, inglês) ✔ Borre as mensagens para criar vídeos tutorias ✔ Assistente AI — Sua inteligência artificial pronta para ajudar! Otimize seu tempo com um assistente inteligente, rápido e sempre disponível. Responda dúvidas, automatize tarefas, gere textos, traduções e muito mais com o poder da IA. Ideal para profissionais, equipes e quem busca praticidade no dia a dia. Importante: ✔ Aprovado na auditoria de segurança do Google Chrome ✔ Não usa banco de dados, tudo acontece no seu computador. Whats Expert é uma extensão independente do Chrome que adiciona recursos extras ao seu WhatsApp web, não fazemos parte do WhatsApp Inc., não temos contrato de uso ou licenças exclusivas
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from ewdht
- Chatweb CRM : Transforme seu whatsapp em um sistema de vendas977 users
- Disparô/Wa - Disparo no WhatsApp, CRM, Automações, Ferramentas para Venda624 users
- ZarpGo308 users
- CRM DE ELITE : CRM no whatsapp, Automações e Ferramentas para venda200 users
- Win7max - CRM no WhatsApp Web, Chatbot, Automação e Disparo em Massa169 users
Popular in Tools
- Claude20,000,000 users
- Zotero Connector9,000,000 users
- ChatGPT8,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users
- WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease7,000,000 users