Is WooCommerce AliExpress Dropshipping Extension safe?

Medium risk

The extension intercepts AliExpress checkout responses and reads session cookies to automate order placement and shipping configuration.

The extension hooks into AliExpress checkout pages to capture order IDs, product details, and cart data from XHR responses, relaying them to the background script. It reads and modifies AliExpress session and preference cookies to sign API requests and adjust shipping region. On AliExpress pages, it also strips X-Frame-Options headers and rewrites Access-Control-Allow-Origin values for all sub-resource responses.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

villathemev1.2.41Chrome Web Store
40Risk
Who publishes it

VICom ltd - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
villatheme
Declared legal entity
VICom ltd
Registered address
696 Cach Mang Thang Tam, Gia Sang, Thai Nguyen 250000, Viet Nam
Registered contact
Tu Ha Ngoc

Same store account

2 other listings published from this account, 3k+ users between them, none of them carrying a finding.

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

trade.aliexpress.ru
Also called by 2 other listings: Aliexpress Dropshipping, AliUp
gj.mmstat.com
Also called by 3 other listings, including Alibaba Lens, 生意助手插件
shoppingcart.aliexpress.ru
Also called by 4 other listings, including Aliexpress Dropshipping, AliUp

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026egamhjcccjiflajhhinondgonlldjgba