Transfer of Ownership

Flag items where ownership has been transferred to a different publisher, which may indicate compromise or changes in trustworthiness.

medium

Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

medium

Low Install Count

Flags items lacking installs on the marketplace, suggesting concerns about the extension's reputation and the publisher's reliability.

low

Extension Purpose and Intention

The Listall Chrome extension aims to enhance WhatsApp Web functionalities by providing CRM-like features such as mass messaging, contact management, and scheduling. It allows users to manage leads, create reminders, and export contacts, all within the WhatsApp Web interface.

Code Insights

API Calls and Network Activity:
- The extension interacts with several backend services hosted on wascript.com.br for functionalities like transcription, multi-attendance, and error logging.
- Example: Fetching DOM Selector data from https://domselector.watidy.com/index.php to update the DOM Selector version.

  async function l(){
    try{
      const t=await(await fetch(u.domSelector)).json();
      typeof t=="object"&&typeof t.version=="string"&&n("https://web.whatsapp.com/*","Update_DomSelector",{version:t.version})
    }catch(e){
      console.error("Error ao tentar Capturar o Dom Selector virtual",e)
    }
  }

Storage and Data Handling:
- Utilizes Chrome's local storage to manage user data such as notifications, contacts, and scheduling information.
- Example: Retrieving and updating local storage data for notifications.

  async function m(){
    const e=await c("notifications"),t=[],o=[];
    let s=0;
    for(let a of e) !a.timeOut&&p(`${a.date}T${a.time}`)&&(a.timeOut=!0,o.push(a)),a.timeOut&&!a.read&&s++,t.push(a);
    n("https://web.whatsapp.com/*","Update_Notificação",{update:t,dispart:o,tam:s})
  }

Alarms and Scheduling:
- Sets up periodic alarms to trigger updates and notifications at specified intervals (e.g., every minute, five minutes).
- Example: Creating alarms for different intervals.

  function i(){
    chrome.alarms.get("One_Minute",e=>{e||chrome.alarms.create("One_Minute",{periodInMinutes:1})}),
    chrome.alarms.get("Five_Minutes",e=>{e||chrome.alarms.create("Five_Minutes",{periodInMinutes:5})}),
    chrome.alarms.get("Ten_Minutes",e=>{e||chrome.alarms.create("Ten_Minutes",{periodInMinutes:10})}),
    chrome.alarms.get("Thirty_Minutes",e=>{e||chrome.alarms.create("Thirty_Minutes",{periodInMinutes:30})})
  }

User Interaction and UI:
- Opens and reloads WhatsApp Web tabs as needed to ensure the extension's functionalities are active.
- Example: Reloading or creating a new WhatsApp Web tab.

  function r(){
    chrome.tabs.query({url:"https://web.whatsapp.com/*"},function(e){
      e.length>0&&e[0].id!==void 0?chrome.tabs.reload(e[0].id):chrome.tabs.create({url:"https://web.whatsapp.com"})
    })
  }

Conclusion

The code primarily focuses on enhancing user experience on WhatsApp Web by adding CRM-like features. It interacts with external services for additional functionalities but does not exhibit strong indicators of malicious behavior such as unauthorized data exfiltration or code execution.

Compliance

Compliance status and certifications for the extension and its publisher

Extensao.store

The website extensao.store has declared that they achieved ISO 27001 certification in December 2023, confirming their compliance with this standard. There is no indication of a parent company or any mention of its compliance status.

Compliant

Licenses

No license text available...