Security Warning: Historically Flagged as Malware

This extension is historically labeled as malware, but the current version analysis does not yet confirm severe malicious findings.Extension: 国际站外贸侠助手测试版-阿里国际站Ai运营插件

HIGH RISKStill available - needs review

国际站外贸侠助手测试版-阿里国际站Ai运营插件

ID: dnabidanfaemamhoekpcodljnmiaikng

Supported Languages

🇨🇳Chinese (Simplified)

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.5.6

Size

10.01 MB

Rating

5.0/5

Reviews

Users

398

Type

Extension

Updated

Jul 29, 2026

Publisher Contextual Analysis

Trusted

Author: wmxia.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,398

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Beta third-party AI operations tool for Alibaba.com sellers, with analytics and export features.

帮助快速获取网站标签Cookies和UserAgent,并且可以发送至指定接口. 【声明】您的任何数据都不会被记录，并且扩展只要求获得所需的权限。在未指定接口的情况下,接口默认地址为：https://loc.008091.xyz:1404/alicookie 该接口地址始终解析到 127.0.0.1，永远不会指向其他地址 1.通过右键菜单，可以复制Cookie，并且可以发送至指定接口 2.点击图标用户可以自定义接口，填写完成后回车保存 3.点击图标可以获得当前标题的cookie、域名、及UserAgent 4.点击图标后可以通过发送按钮，发送至指定接口未自定义的情况将默认发送至https://loc.008091.xyz:1404/alicookie 该域名指向本地

User Growth

Showing data from Aug 25, 2022 to Aug 02, 2026

Versions

+60.33%(+146 users)

Compared to 3 months ago

33 versions released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low1

Versions scanned

Showing 1 of 31 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.0 Code review	7

Extension Version	Code Review Findings
1.1.0	7

Files with findings

1 distinct path — top paths by unique finding count:

background.js7

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	high	background.js (line 331)	A generic PROXY_FETCH message handler lets any content script or page-context script issue arbitrary HTTP requests through the background service worker, bypassing CORS using the extension's broad host_permissions (in…	1.1.0
2	Network Interception	high	background.js (line 925)	The background script hooks webRequest.onBeforeRequest with requestBody access on multiple internal Alibaba message/CRM endpoints (onetalk.alibaba.com, message.alibaba.com, alicrm.alibaba.com) to capture and cache sen…	1.1.0
3	Unauthorized Data Collection	high	background.js (line 798)	Reads the user's Alibaba ctoken and _tb_token_ cookies, then iterates every inquiry page and detail endpoint to bulk harvest customer PII — sender name, email, country, product, quantity, customer level. All records a…	1.1.0
4	Credential Theft	medium	background.js (line 665)	Hard-coded fallback values "e631353eead61" and "15tf_ghj3oyq_" are used if the user's _tb_token_ / ctoken cookies are missing. Embedding plausible-looking token fallbacks is characteristic of an author who had working…	1.1.0
5	Data Exfiltration	medium	background.js (line 193)	On every status refresh the extension queries the remote waimao.host account endpoints and persists the entire user object (username, groups, trust_level, gamification_score, csrfToken) into encrypted local storage. B…	1.1.0
6	Tracking	medium	background.js (line 746)	Silently archives a 30-day rolling profile of every Alibaba visitor (visitorId, buyerName, search keywords, page views, dwell time) into chrome.storage.local under wmx_visitor_archives whenever the user opens the visi…	1.1.0
7	Remote Code Loading	low	background.js (line 110)	A "v_test.json" file on the vendor's server (s.waimao.host) is polled daily and its contents cached as "remoteInfo". While the code currently only uses latest_version/min_version fields, the author ships the full remo…	1.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

224

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www2.alibaba.com	-	https://www2.alibaba.com/
mydata.alibaba.com	-	https://mydata.alibaba.com/
i.alibaba.com	-	https://i.alibaba.com/
www.alibaba.com	-	https://www.alibaba.com/
apis.678911.xyz	-	https://apis.678911.xyz
m.alibaba.com	/productDetail/$%7Bt%7D/bizData.html%60;return	https://m.alibaba.com/productDetail/${t}/bizData.html`;return
hz-productposting.alibaba.com	/product_operate/layer/product_list.do	https://hz-productposting.alibaba.com/product_operate/layer/product_list.do?${new
mydata.alibaba.com	/self/.json	https://mydata.alibaba.com/self/.json?action=OneAction&iName=customerAdviser/industryVersion/keywordList&byrGroup=visit&nd=${e}&byrGrowthLevel=TOTAL&cateLv1Id=${o}&cateLv2Id=${n}&cateLv3Id=${u}&cateId=${f}&kwType=shop&orderBy=shopUv&orderModel=desc&pageNO=1&pageSize=20&ctoken=${p}`;return
mydata.alibaba.com	/self/.json	https://mydata.alibaba.com/self/.json?action=OneAction&iName=customerAdviser/industryVersion/customerProfile&byrGroup=visit&nd=${e}&byrGrowthLevel=TOTAL&ctoken=${p}`;return
vips.wmxia.com	/info.json	https://vips.wmxia.com/info.json?t=

Showing 1 to 10 of 230 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.5.6	IPv4	-
4.5.8.9	IPv4	-
1.1.1.1	IPv4	-
51.4.8.1	IPv4	-
1.2.2.5	IPv4	-
11.6.4.7	IPv4	-
5.1.1.6	IPv4	-
2.4.7.9	IPv4	-
5.2.8.7	IPv4	-
5.1.8.7	IPv4	-
3.4.4.3	IPv4	-
5.1.8.6	IPv4	-
5.1.9.7	IPv4	-
5.4.9.9	IPv4	-
4.3.7.6	IPv4	-
3.7.7.3	IPv4	-
4.2.8.6	IPv4	-
15.8.4.2	IPv4	-
1.2.9.6	IPv4	-
5.3.9.8	IPv4	-
4.3.7.7	IPv4	-
0:0:0:0:0:0:0:1	IPv6	-

Showing 1 to 22 of 30 rows

Rows per page:

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

不错的插件

Bruce Ding·18 Mar 2026

非常好用的一款国际站插件，没有花里胡哨，干净解决，功能实用

Gau aowd·15 Mar 2026

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: Historically Flagged as Malware

国际站外贸侠助手测试版-阿里国际站Ai运营插件

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 31 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating