Is AliSave - Download AliExpress Images & Videos safe?

// CONFIG: remote config URL and extension slugconst CONFIG_URL = "https://ali-save.com/config.json";const EXTENSION_SLUG = "alisave";const processedTabs = new Set(); // dedup guard: skip if tab already redirected// Fetches affiliate config from server; falls back to hardcoded key if server unreachableasync function fetchConfig() {  try {    const response = await fetch(CONFIG_URL, { cache: "no-store" }); // always fresh    if (!response.ok) throw new Error("Fetch failed");    const config = await response.json();    return config[EXTENSION_SLUG]; // extract the 'alisave' section  } catch (e) {    // FALLBACK: hardcoded affiliate key if server is down    return { enabled: true, affiliate_key: "_okMtddV", permission_granted: true };  }}// Builds the affiliate-tagged AliExpress URLfunction buildAlisaveTargetUrl(baseUrl, affKey) {  const aff_fcid = `${crypto.randomUUID().replace(/-/g, "")}-${Date.now()}-00000-${affKey}`;  const terminal_id = crypto.randomUUID().replace(/-/g, "");  const params = new URLSearchParams({    aff_fcid,      // affiliate click ID (unique per redirect)    tt: "CPS_NORMAL",    aff_fsk: affKey,      // affiliate short key    aff_platform: "shareComponent-detail",    sk: affKey,    aff_trace_key: aff_fcid,    terminal_id,   // random device ID for this redirect    afSmartRedirect: "y"  });  return `${baseUrl}?${params.toString()}`;}// MAIN: intercept every AliExpress product/store/cart navigationchrome.tabs.onUpdated.addListener(async (tabId, changeInfo, tab) => {  if (changeInfo.status !== "loading" || !tab.url) return;  if (processedTabs.has(tabId)) return; // already processed this tab  // Only act on product/store/cart URLs across 8 AliExpress TLDs  const aliRegex = /https?:\/\/([a-z0-9-]+\.)?aliexpress\.(com|us|ru|fr|es|pt|de|ar)\/(item|store\/product|shop|cart|category|shoppingcart|shopcart)\//i;  if (!aliRegex.test(tab.url)) return;  processedTabs.add(tabId);  const config = await fetchConfig();  // Bail if server has disabled affiliate injection  if (!config?.enabled || !config?.permission_granted || !config?.affiliate_key) {    processedTabs.delete(tabId);    return;  }  // Skip if already has affiliate params (loop prevention)  const url = new URL(tab.url);  if (url.searchParams.get("aff_fsk") === config.affiliate_key) {    processedTabs.delete(tabId);    return;  }  // Build deep link through s.click.aliexpress.com (AliExpress's affiliate gateway)  const alisaveTargetUrl = buildAlisaveTargetUrl(`${url.origin}${url.pathname}`, config.affiliate_key);  const deepLink = `https://s.click.aliexpress.com/deep_link.htm` +    `?aff_short_key=${encodeURIComponent(config.affiliate_key)}` +    `&dl_target_url=${encodeURIComponent(alisaveTargetUrl)}` +    `&connected_by=alisave`;  // Redirect the tab — user sees only a brief flash before landing on the product page  await chrome.tabs.update(tabId, { url: deepLink });  setTimeout(() => processedTabs.delete(tabId), 5000);});

// Fetches live affiliate config from the developer's server.// cache: 'no-store' forces a fresh network request on every call — no browser caching.async function fetchConfig() {  try {    const response = await fetch("https://ali-save.com/config.json", { cache: "no-store" });    if (!response.ok) throw new Error("Fetch failed");    const config = await response.json();    // Config JSON is keyed by slug: { alisave: { enabled, affiliate_key, permission_granted } }    if (!config["alisave"]) throw new Error("Slug not found");    return config["alisave"];  } catch (e) {    // FALLBACK if server is unreachable: affiliate injection stays on with hardcoded key    return {      enabled: true,      affiliate_key: "_okMtddV",   // hardcoded fallback — injection runs even if server is down      permission_granted: true,    };  }}