Just to warn, it looks like there is nothing private about this in any way shape or form. The API exposes all chat's and other potentially sensitive user information to anyone that decides to query the API, and would then not be hard to script it.
KyrneDev/whisper6 is what I've raised on Github, but I'd strongly suggest folks disable and remove this add-on...