Top Risks

• Content script on WhatsApp web with access to all messages; routes data to 5 external AI/backend hosts including wascript.com.br.
• Gmail developer with no verified identity, WhatsApp brand impersonation, no developer name disclosed.
• Uninstall URL hijack and install URL hijack detected — classic monetization/tracking shell pattern.
• Privacy policy fetched but does not scope to this extension, does not disclose data collection or retention.
• function_constructor (new Function) and innerHTML DOM-XSS sink found in code; no CSP present.

Evidence

• brand_impersonation store WhatsApp brand mentioned; developer domain is gmail.com, confirmed_owner=false, is_impersonation=true.
• uninstall_url_hijack crx uninstall_url_hijack=true; classic monetization/tracking signal.
• install_url_hijack crx install_url_hijack=true targeting https://web.whatsapp.com on install.
• free_webmail_developer store Developer email beto18salazar@gmail.com; no developer name; no verified publisher.
• external_hosts_wascript crx 4 wascript.com.br subdomains contacted: api-whatsapp, audio-transcriber, backend-utils, multi-atendimento, painel-new.
• code_function_constructor crx new Function() constructor found in JS file v_7_4_3_31...3170.js — dynamic code execution risk.
• privacy_policy_generic api Policy fetched but scope_extension=false, data_collection=false, retention=false — does not cover this extension.
• no_csp manifest content_security_policy is null; MV3 default applies but innerHTML sink present with no explicit CSP.

Permissions Breakdown

• unlimitedStorage low Allows large local storage; low direct exfil risk.
• storage low Standard key-value store; low risk alone.
• alarms low Scheduling only; minimal risk.
• tabs medium Can read tab URLs and titles; moderate surveillance capability.
• notifications low UI notifications; low risk.
• https://generativelanguage.googleapis.com/* medium AI API host access; enables sending WhatsApp content to Google AI.
• https://api.groq.com/* medium Third-party AI API; WhatsApp data could be sent externally.
• https://api.openai.com/* medium OpenAI API access; potential WhatsApp message exfiltration.
• https://openrouter.ai/* medium AI routing API; aggregates to multiple LLM backends.
• content_scripts: https://web.whatsapp.com/* high Full script injection into WhatsApp web; reads all messages and contacts.

Pillar Scores

Bookkeeping