Is waCluster : Organize, automatize e decole nas vendas safe to use?

waCluster : Organize, automatize e decole nas vendas has a security risk score of 57.06/100 (MEDIUM risk). Our security analysis detected 520 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of waCluster : Organize, automatize e decole nas vendas?

Based on our automated security analysis, waCluster : Organize, automatize e decole nas vendas presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store Verified

waCluster : Organize, automatize e decole nas vendas

by [email protected]

6495b121-4b5c-54cb-a397-201b7fe801a0 | v8.0.1

MEDIUM risk

Risk verdict

Review before use

Score-based assessment (medium risk, 57/100). No analyst review available.

Analysis record

Analysed: 4 days ago
Version: v8.0.1
Artifact: SHA256 2F5…817
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

188 detail rows

YARA Rule Matches

14 rules

Severity	Rule	Hits	Files	Metadata
LOW	`credential env files`	6	assets/DHydI8P7.jsassets/DrOm9ELX.jsassets/f8ilPlnc.js +3 more	-
LOW	`postinstall persistence mechanism`	11	fluxo/style.cssassets/C7yHEA8X.jsassets/mLPMU4Zf.js +8 more	-
LOW	`ServerHostnameNotVerified`	1	assets/mLPMU4Zf.js	-
LOW	`LocalStorageShouldNotBeUsed`	9	assets/DKzRksBG.jswhatsapp/wpp/index.jswhatsapp/early-theme.js +6 more	-
LOW	`NoUseEval`	1	whatsapp/wpp/index.js	-
LOW	`NoUseWeakRandom`	7	assets/DHydI8P7.jsassets/DrOm9ELX.jsassets/f8ilPlnc.js +4 more	-
LOW	`postinstall file download`	23	fluxo/assets/ttf/Segoeuibolditalic.chunk.ttfassets/Dxn0KnXM.jswhatsapp/wpp_module/index.js +20 more	-
LOW	`SQLInjection`	2	assets/mLPMU4Zf.jsassets/DHydI8P7.js	-
LOW	`postinstall crypto operations`	15	assets/CVmIBwFD.jsassets/f8ilPlnc.jsassets/C7yHEA8X.js +12 more	-
LOW	`postinstall system command`	24	assets/DmX9NE29.jsassets/CVmIBwFD.js_metadata/verified_contents.json +21 more	-
LOW	`postinstall file manipulation`	23	assets/CVmIBwFD.jsassets/Dxn0KnXM.jsassets/DrOm9ELX.js +20 more	-
LOW	`postinstall network communication`	32	content/assets/emoji/facebook/64/1f469-1f3fe-200d-2764-fe0f-200d-1f48b-200d-1f469-1f3ff.webpassets/DKzRksBG.jscontent/assets/emoji/facebook/64/1f64c-1f3fc.webp +29 more	-
LOW	`postinstall environment access`	14	assets/CVmIBwFD.jsassets/BhhPuiZG.jsassets/DrOm9ELX.js +11 more	-
LOW	`postinstall obfuscation`	17	assets/CVmIBwFD.jsassets/InJSU3IX.jsassets/Dxn0KnXM.js +14 more	-

Show network indicators (332)

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

wacluster.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

12 evidence rows available.

Finding Categories

Network

332

IoC Indicators

YARA Rules Matched

14 rules(185 hits)

credential env files postinstall persistence mechanism ServerHostnameNotVerified LocalStorageShouldNotBeUsed NoUseEval NoUseWeakRandom postinstall file download SQLInjection postinstall crypto operations postinstall system command postinstall file manipulation postinstall network communication postinstall environment access postinstall obfuscation

Requested Permissions

16 permissions

unlimitedStorage

Low

storage

Low

alarms

Low

notifications

Low

https://web.whatsapp.com/*

Low

https://api.wacluster.com/*

Low

https://flow.wacluster.com/*

Low

https://atendimento.wacluster.com/*

Low

https://wh.wacluster.com/*

Low

https://code.wacluster.com/*

Low

https://transcricao.wacluster.com/*

Low

https://wa-api.wacluster.com/*

Low

https://mcp.wacluster.com/*

Low

https://generativelanguage.googleapis.com/*

Low

https://api.openai.com/*

Low

https://api.groq.com/*

Low

Security Analysis Summary

Security Analysis Overview

waCluster : Organize, automatize e decole nas vendas is a Chrome Web Store extension published by [email protected]. Version 8.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 57.06/100 (MEDIUM risk) based on 520 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

Medium: 335 finding(s)
Low: 185 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

waCluster : Organize, automatize e decole nas vendas is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

waCluster transforma o WhatsApp Web em um CRM completo, sem trocar de aplicativo e sem instalar nada no celular. Organize • Abas e filtros para separar clientes, orçamentos e grupos • Etiquetas, conversas fixadas e perfil do contato com dados do negócio • CRM Kanban e funil de vendas • Anotações por contato e mensagens apagadas recuperadas Responda mais rápido • Respostas rápidas com texto, áudio, imagem, vídeo e documento • Substituir texto automaticamente e assinatura do atendente • Transcrição de áudios e tradução com IA • Corrigir, melhorar e criar textos com IA direto nos campos de mensagem Automatize • Agendamento de mensagens com recorrência • Lembretes e evento no Google Agenda • Auto atendimento por palavra-chave ou horário • Follow-up para quem parou de responder • Fluxos de conversa (chatbot) • Envio em massa para seus contatos e etiquetas Configure com IA (novo) • Conecte Claude, Codex, Cursor ou outra IA pelo MCP e configure respostas rápidas, follow-ups, fluxos e agendamentos só conversando com sua IA preferida. Trabalhe em equipe e integre • Multiatendimento: transfira conversas entre atendentes • WebHooks (n8n, Make, Zapier) e API • Backup e restauração dos seus dados Teste grátis de 3 dias com todos os recursos. Política de privacidade: https://ex.wacluster.com/privacidade waCluster é um produto independente e não tem vínculo com o WhatsApp ou com a Meta.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace