Who makes Audio to Text + Translation in WhatsApp Web using AI?

Audio to Text + Translation in WhatsApp Web using AI is published by j38437882. The same operator publishes 2 other store listings, none of which carry a security finding.

Is Audio to Text + Translation in WhatsApp Web using AI safe?

Medium risk

Audio to Text + Translation in WhatsApp Web using AI is medium risk. When you use the unlock workflow on WhatsApp Web, the extension can request a forwarding task from wadesk.io that includes a recipient and message text.…

j38437882v2.0.4Chrome Web Store

45Risk

Who publishes it

j38437882 - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

j38437882

Same store account

2 other listings published from this account, 10k+ users between them, none of them carrying a finding.

WA Web Translate - Real-time Message Translate & Audio to Text7k+Low LINE App Translator Bot - LINE Chat3k+Low

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cdn.wadesk.io

Also called by 4 other listings

walink.ai

Also called by 5 other listings

wadesk.io

Also called by 7 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Unlock workflow sends vendor-provided WhatsApp messages to recipients.

When you use the unlock workflow on WhatsApp Web, the extension can request a forwarding task from wadesk.io that includes a recipient and message text.

It then asks the WhatsApp page script to resolve that recipient, send the provided message, and report the delivery status back to wadesk.io.

Severity: Medium unwanted
Type: Unexpected
CWE: CWE-506
Source: Dynamic sandbox

What actually happens

You did this

The user starts the unlock workflow on WhatsApp Web.

The extension did this

The extension retrieves a forwarding task and uses WhatsApp Web to send the provided message to the provided recipient.

Captured request

POSTwadesk.io/api/ext/v2/un_token/forward_message/get_one; wadesk.io/api/ext/v2/un_token/forward_message/update_status

Fields used by the forwarding workflow

WhatsApp page content
Message text to send on WhatsApp (illustrative)
The workflow uses content from the WhatsApp Web page, including the recipient and message text returned for the forwarding task.

Observation

Dynamic analysis confirmed that the workflow is scoped to WhatsApp Web pages and that the page script resolves the recipient, sends the provided message, and returns a status update.