Is AliDropship 2.0 safe?

AliDropship 2.0 sends AliExpress product data and order details to its own servers and a third-party GraphQL endpoint.

When you visit AliExpress product or category pages, the extension collects product IDs, prices, and store URLs and POSTs them to tools.alidropship.com. When orders are placed or tracked, full order details including payment dates, tracking IDs, and product objects are transmitted via GraphQL mutations to node3.ssdma.com. A content script running on all pages also accepts order automation commands over window.postMessage without validating the message origin.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.