Is AliSave - Download Ali Images & Videos safe?
AliSave redirects AliExpress and Alibaba product pages through affiliate endpoints after enhanced features are enabled.
After the user clicks Allow & Continue for enhanced features, AliSave watches tab navigation on AliExpress and Alibaba product pages. It sends the current product URL to its affiliate API or rewrites the tab through affiliate redirect services before continuing to the product page.
Who publishes italisave.info - 2 other listings from the same operator, 2 of them carrying a finding
alisave.info - 2 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 11k+ users between them. 2 of them carry a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
AliExpress and Alibaba pages redirected through affiliate endpoints
After clicking Allow & Continue on AliExpress or Alibaba, the extension can redirect matching product pages through affiliate services, sending the product-page URL to alisave.info, s.click.aliexpress.com, or acfe-vf2021.com.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Dynamic sandbox
The user enables enhanced features by clicking Allow & Continue on AliExpress or Alibaba.
The extension redirects matching AliExpress and Alibaba product pages through affiliate endpoints.
- Product-page URLhttps://www.aliexpress.com/item/1005001234567890.html (illustrative)
Identifies the AliExpress or Alibaba product page being routed through the affiliate flow.
Dynamic analysis confirmed the extension has broad host access, prompts on AliExpress and Alibaba hosts, and redirects matching product pages through the listed affiliate endpoints after the user enables the feature.
What it can do
Permissions this extension asks for, as declared in version 4.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Start, monitor and manage your downloads
downloads
See the address and title of every tab you have open
tabs
Schedule its own background tasks
alarms
Where it sends data
Destinations our analysis observed AliSave - Download Ali Images & Videos contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- s.click.aliexpress.com
AliSave - Download Ali Images & Videos sends data to s.click.aliexpress.com. 24 other extensions we have analysed send data here.
- alisave.info
AliSave - Download Ali Images & Videos sends data to alisave.info. One other extension we have analysed sends data here.
- acfe-vf2021.com
AliSave - Download Ali Images & Videos sends data to acfe-vf2021.com. No other extension we have analysed sends data here.