Is AliSaving Plus - Aliexpress Product Image Downloader with Videos safe?
AliSaving Plus opens AliExpress product and store clicks through a hardcoded affiliate deep-link URL.
On AliExpress pages, the content script scans links to product and store pages and intercepts the first matching click once per day. It sends the clicked URL to the background script, which opens a new inactive tab at s.click.aliexpress.com/deep_link.htm with the original URL as dl_target_url.
Who publishes itSaxsos - 3 other listings from the same operator, 2 of them carrying a finding
Saxsos - 3 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
Same operator - 2 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
AliExpress clicks open through affiliate deep-link URL
When you click AliExpress product or store links, the extension intercepts the click once daily and opens the destination via an AliExpress affiliate deep-link URL, sent to s.click.aliexpress.com/deep_link.htm as the target.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Dynamic sandbox
The user clicks an AliExpress product or store link.
The extension intercepts the click once per day and opens the destination through a hardcoded affiliate deep-link URL.
- Clicked AliExpress URLhttps://www.aliexpress.com/item/1005001234567890.html (illustrative)
Identifies the product or store link you chose before the extension opens it through the affiliate deep-link endpoint.
What it can do
Permissions this extension asks for, as declared in version 3.6.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on alicdn.com
*://*.alicdn.com/*
Read and change your data on cloud.video.taobao.com
*://cloud.video.taobao.com/*
Read and change your data on aliexpress.com
*://*.aliexpress.com/*
Read and change your data on aliexpress.ru
*://*.aliexpress.ru/*
Start, monitor and manage your downloads
downloads
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Where it sends data
Destinations our analysis observed AliSaving Plus - Aliexpress Product Image Downloader with Videos contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- s.click.aliexpress.com
AliSaving Plus - Aliexpress Product Image Downloader with Videos sends data to s.click.aliexpress.com. 24 other extensions we have analysed send data here.