Is Web for Google Messages safe?

Low risk

Web for Google Messages inserts remote message HTML into Google pages before the first display is sanitized.

The extension fetches message content from jitt.wwevents.fun and displays it as a toast inside Google Messages, Meet, or Chat pages it opened. The first remote message is passed directly into the toast before later message rotation uses DOMPurify sanitization.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

WWEventsv6.0Chrome Web Store
17Risk
Who publishes it

wwevents - 12 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
WWEvents
Declared legal entity
wwevents
Registered address
Persiaran Sukan, Shah Alam, Selangor 40100, MY

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on android.com

    *://*.android.com/*

  • Read and change your data on google.com

    *://*.google.com/*

  • Read and change your data on wwevents.fun

    *://*.wwevents.fun/*

  • Read and change your data on every site you visit

    <all_urls>

  • Read information about your displays

    system.display

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

  • Show you desktop notifications

    notifications

  • Add items to the right-click menu

    contextMenus

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Store data in your browser

    storage

Updated 30 September 2026hkhjfcfonfkhnpcpkhpbpmplnlcpcldh