Chrome Web Store
52Versions
1Code reviewed

Do not install

Code review: critical (v3.0.26)

Our reviewer read version 3.0.26 of this extension and confirmed malicious behaviour. 2 security findings documented below. Do not install it. Remove it if you already have it.

What our analysis found

AliSave Plus - Download AliExpress Images, used by 100,000 people, is rated malicious by Extension Auditor. Our code review reported 2 findings (1 critical, 1 high), led by network interception. Its permissions mean it can read and change data on all websites and can observe network requests.

Key findings

  • Critical

    Network Interception

    The background script sends a POST request to a third-party domain ([domain withheld]) with the product ID, page hostname, and a source identifier upon detecting an AliExpress or Alibaba product page visit. The response contains a 'keepurl' which is then used to redirect the user's tab to a different URL, likely an affiliate link. This behavior is not disclosed in the extension's description and is unrelated to its advertised functionality of downloading product images and videos. It constitutes unauthorized network interception and user redirect.

  • High

    Tracking

    The extension sends the product ID and page hostname to a remote server ([domain withheld]) without explicit user consent. This data collection, which can be used to track browsing activity on AliExpress, is not clearly disclosed in the CWS privacy practices (only 'Website content' is listed). The destination domain is not the publisher's own website, making this an unauthorized data exfiltration to a third party.

Analyst notes

The extension secretly redirects AliExpress product page visits to a third-party URL obtained from a remote server ([domain withheld]) without user consent or disclosure. This misuses the webRequest and broad host permissions, and sends product IDs and browsing information to an unauthorized external domain. The behavior is unrelated to the advertised functionality of downloading product images and videos, and indicates affiliate fraud or user tracking.

AliSave Plus - Download AliExpress Images

AliSave Plus - Download AliExpress Images Chrome extension security report

ID: ppfoibjbcchcfifclhebkhnigneiceje

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.0.28
Size
0.25 MB
Rating
4.5/5
Reviews
1,300
Users
100,000
Type
Extension
Updated
Oct 9, 2026
Category
Shopping
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
https://alisaveplus.com/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

About this extension

Download Aliexpress Product Images & Videos. The most popular tool for AliExpress!

Read the publisher’s full description

Download product images & video, variation images, photos from description. This extension allows you to easily save AliExpress images and videos to your computer Must have for dropshipping business ✜ ✜ ✜ AliSave Plus is free, give it a try ! ✜ ✜ ✜ [GETTING STARTED] 1. Install the extension by clicking the "Add to chrome" button. 2. Open an AliExpress product page. 3. Click on the download buttons. [FEATURES] - Download main product images, variations images and pictures from description - Get the best quality image download - Convert webp images to JPG - Remove images metadatas - Save product's video - HTML product description - Download a text file with product information. - Works for both aliexpress.com and aliexpress.ru! [ ___ HOT ___ FEATURES] - Download as .ZIP. - Search similar products by image on AliExpress. - Download images one by one (right click). - Watermark: Automatically adding watermark on image download. - Compress images with the best quality and compression. - Real photos: product photos from customer feedbacks and product reviews. *** Support all features on: AliExpress, Alibaba. If you have any questions regarding privacy protection when using the service, please contact us by email at [alisaveplus@gmail.com]

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
3.0.28
Latest
0.25 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.27
0.25 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.26
0.25 MBMalicious0
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.25
0.28 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.23
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.22
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.21
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.19
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.18
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
3.0.17
0.54 MBNot scanned—
e94e9a45f0ce06e027aa6b44d9b0091b9900a91c781132349d85295e6e284aa6
Showing 1 to 10 of 60 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.