Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeAliPrice for sellers
Findings · 3
+2 more findings locked
HIGH FINDINGS · 3
  1. 01Browsing-history exfiltration: extension monitors every http(s) tab navigation, stores URLs that match a remote-fetched regex list, and POSTs them in batches every ~32 minutes to api.aliprice.com
  2. 02Persistent per-install pseudonymous identifier (m-info cookie) is set on aliprice.com with ~10-year expiration and attached to all server requests, enabling longitudinal correlation of the URL telemetry
  3. 03Remote-controlled scope: the URL regex list that decides which visited pages to harvest is fetched from api.aliprice.com at runtime, so the vendor can broaden tracking to arbitrary sites without a code update
+2 more findings locked
OTHER EXTENSIONS

Is AliPrice for sellers safe?

High risk

No summary available.

AliPrice Co. Ltd.v2.5.54Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+2 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026com.aliprice.AliPrice-Shopping-Assistant-for-1688-com.Extension

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact