Is Message Outreach: Bulk DMs & AI Tweak safe?
IG DM Sender stores your Instagram CSRF token in exported issue logs using reversible encoding and a bundled default key.
When the popup checks the Instagram page, content code extracts the CSRF token and the popup writes it into its logs. The issue-report export encodes those logs with XOR plus base64 and a bundled default key, so exported logs can contain a recoverable Instagram credential.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itautomatismworks - 3 other listings from the same operator, 1 of them carrying a finding
automatismworks - 3 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 102k+ users between them. 1 of them carries a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.