Is MYBEST代购代运助手 / 一键添加包裹 safe?
MYBEST代购代运助手 sends parcel form details to MYBEST over cleartext HTTP.
When a user submits a parcel through the extension-injected Taobao or Shopee flow, the extension sends tracking number, item name, quantity, value, item type, and memo fields to MYBEST using an unencrypted HTTP POST. The shipped extension bundle also contains hardcoded MYBEST warehouse API credentials, making those credentials recoverable from the installed package.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.09. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on buyertrade.taobao.com
*://buyertrade.taobao.com/
Read and change your data on taobao.com
*://*.taobao.com/*
Read and change your data on seller.shopee.com.my
*://seller.shopee.com.my/
Read and change your data on mybest.com.my
*://*.mybest.com.my/
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Where it sends data
Destinations our analysis observed mybest%E4%BB%A3%E8%B4%AD%E4%BB%A3%E8%BF%90%E5%8A%A9%E6%89%8B-%E4%B8%80%E9%94%AE%E6%B7%BB%E5%8A%A0%E5%8C%85%E8%A3%B9 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ww2.mybest.com.my
mybest%E4%BB%A3%E8%B4%AD%E4%BB%A3%E8%BF%90%E5%8A%A9%E6%89%8B-%E4%B8%80%E9%94%AE%E6%B7%BB%E5%8A%A0%E5%8C%85%E8%A3%B9 sends data to ww2.mybest.com.my. No other extension we have analysed sends data here.