Is AliSave safe?

Question

Is AliSave safe?

Accepted Answer

AliSave is high risk. Our dynamic analysis captured this extension automatically redirecting AliExpress product, store, and cart page navigations through an affiliate tracking link before the page loaded. Every time you visit a qualifying AliExpress URL, the extension contacts ali-save.com to retrieve an affiliate key, then rewrites your tab URL through s.click.aliexpress.com — appending affiliate tracking parameters — before forwarding you to the product. Any purchase you complete after being redirected attributes a commission to the extension developer. This behavior is not disclosed in the extension's Chrome Web Store listing, which describes it as an image and video download tool. On every AliExpress product, store, or cart page navigation, the extension fetches a configuration file from ali-save.com with no caching. This configuration file controls whether affiliate injection is active (via enabled and permission_granted flags) and which affiliate tracking key is used. The server can change these values at any time, turning the redirect behavior on or off or switching the affiliate key without issuing an extension update. Our dynamic analysis observed 9 requests to this endpoint across 3 AliExpress product page navigations.

Is AliSave - Download AliExpress Images & Videos safe?

Findings