Is AliScraper - Aliexpress Dropshipping Importer safe?
AliScraper reads authentication tokens from dsers.com pages and forwards them to ac.dsers.com to retrieve product listings for bulk import.
On dsers.com pages, the extension reads the user's JWT bearer token and store ID from localStorage and sends them to ac.dsers.com to fetch the user's product list. It also listens for cross-origin postMessage events on AliExpress and partner sites; when triggered, it starts a scraping flow using the product ID supplied in the message without verifying the sender's origin.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itSpocket Inc - no other listings under this identity
Spocket Inc - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.2.17. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on aliexpress.com
https://*.aliexpress.com/
Read and change your data on aliexpress.us
https://*.aliexpress.us/
Read and change your data on aliscraper.com
https://*.aliscraper.com/
Read and change your data on oberlo.com
https://*.oberlo.com/
Read and change your data on spocket.co
https://*.spocket.co/
Read and change your data on dsers.com
https://*.dsers.com/
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Where it sends data
Destinations our analysis observed AliScraper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ac.dsers.com
AliScraper sends data to ac.dsers.com. No other extension we have analysed sends data here.
- newapi.spocket.co
AliScraper sends data to newapi.spocket.co. No other extension we have analysed sends data here.