Is 速卖通选品助手 - 免费AliExpress选品与数据分析 safe?

Low risk

速卖通选品助手 exposes a message bridge that lets localhost pages read cookies and proxy browser requests.

The extension injects a content script into localhost pages and accepts page-supplied messages without checking the page origin. Those messages can ask the background script to read browser cookies, access extension storage, open or update tabs, or make fetch requests using caller-controlled URLs and headers.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

极鲸云v1.0.2Chrome Web Store
19Risk
Who publishes it

极鲸云 - 8 other listings from the same operator, 2 of them carrying a finding

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Add items to the right-click menu

    contextMenus

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed 速卖通选品助手 - 免费AliExpress选品与数据分析 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • localhost

    速卖通选品助手 - 免费AliExpress选品与数据分析 sends data to localhost. Named as a recipient by 11 other extensions we have analysed.

Updated 30 September 2026jilleohpohhmdflmmndpmoifopljeajg