Who makes Multi AI Sidebar?

Multi AI Sidebar is published by wwevents, registered at Persiaran Sukan, Shah Alam, Selangor 40100, MY. The same operator publishes 17 other store listings, 1 of which carry a security finding.

What servers does Multi AI Sidebar send data to?

Our analysis observed Multi AI Sidebar sending data to jitt.wwevents.fun.

Is Multi AI Sidebar safe?

Q: Is Multi AI Sidebar safe?

Multi AI Sidebar is low risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Low risk

Multi AI Sidebar fetches messages from jitt.wwevents.fun and shows the first one as unsanitized HTML on AI chat pages.

The extension adds a sidebar for AI chat sites such as ChatGPT, Gemini, Claude and Grok. It requests notification text from jitt.wwevents.fun and displays it as toast messages inside those pages. The first toast is inserted as raw HTML without sanitizing, while later toasts pass through DOMPurify.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

WWEventsv2.0Chrome Web Store

17Risk

Who publishes it

wwevents - 17 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

WWEvents

Declared legal entity

wwevents

Registered address

Persiaran Sukan, Shah Alam, Selangor 40100, MY

Website

jitt.wwevents.fun/project/multi-ai-sidebar/

Same store account

17 other listings published from this account, 95k+ users between them. 1 of them carries a finding.

Web for Telegram50k+Medium Web for Google Messages10k+Low Instant Games10k+Low PiP - Picture in Picture Plus10k+Clean Chat and Meet for Google5k+Low Emoji Keyboard3k+Low 11 more listings in the relationship graph, on paid plans →

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

pay.oinkandstuff.com

Also called by 2 other listings, including Web for TikTok

pay.wwevents.fun

Also called by 2 other listings, including Web for TikTok

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

Read and change your data on openai.com
*://*.openai.com/*
Read and change your data on google.com
*://*.google.com/*
Read and change your data on bing.com
*://*.bing.com/*
Read and change your data on live.com
*://*.live.com/*
Read and change your data on microsoft.com
*://*.microsoft.com/*
Read and change your data on wwevents.fun
*://*.wwevents.fun/*
Read and change your data on chatgpt.com
*://*.chatgpt.com/*
Read and change your data on every site you visit
<all_urls>
Read information about your displays
system.display
Run its own code inside the pages you visit
scripting
Act on the current tab, but only after you click the extension
activeTab
Show you desktop notifications
notifications
Add items to the right-click menu
contextMenus
Store an unlimited amount of data in your browser
unlimitedStorage
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest
See which of your requests its blocking rules matched
declarativeNetRequestFeedback

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed Multi AI Sidebar contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

jitt.wwevents.fun
Multi AI Sidebar sends data to jitt.wwevents.fun. 13 other extensions we have analyzed send data here.