Chrome Web StoreCaution required
Suspicious in code review (v2.0)
Our reviewer found behaviour consistent with malware in version 2.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
125 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Whale - Product Importer, used by 1,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (2 high), led by other. Its permissions mean it can read and change data on all websites.
Key findings
- High
Other
When the user visits any AliExpress product page, the extension silently POSTs the current product URL to `[domain withheld] and injects a fully hidden iframe (0×0 pixels, opacity 0) whose src is the affiliate redirect URL returned by that API. This is affiliate cookie stuffing: the hidden iframe loads the affiliate link in the background, setting affiliate tracking cookies without the user's knowledge or consent so the extension operator earns commissions on subsequent purchases. This behavior is not disclosed in the CWS privacy policy (disclosed collection is 'Website content' only) and the destination iframe src is a third-party affiliate URL, not the publisher's own domain.
- High
Other
The bundled ZIP contains a Manifest V2 extension scoped to four specific domains, while the live Chrome Web Store listing declares a Manifest V3 extension with `<all_urls>` host permissions and exposes a ` ` web-accessible resource (not present in the ZIP) to all websites. This mismatch means the deployed extension has far broader access than what was analyzed — it can read and modify any page the user visits — which is itself a high-severity signal independent of the ZIP's limited permissions.
Analyst notes
The extension performs covert affiliate cookie stuffing on AliExpress product pages: `:89-94` POSTs the current product URL to `[domain withheld], receives back an affiliate redirect URL, then silently injects a 0×0 opacity-zero iframe loading that URL — a textbook affiliate cookie-stuffing technique not disclosed in the CWS privacy policy. This is corroborated by the publisher's 100% malicious rate on other extensions and a critical manifest mismatch: the live CWS manifest (MV3) claims `<all_urls>` access to all websites while the analyzed ZIP (MV2) is scoped only to `[domain withheld]`, `[domain withheld]`, and `[domain withheld]`. ML signals (js_appendchild, js_post_requests, js_innerhtml) map directly to this legitimate-looking but deceptive behavior pattern, and the third-party chrome-stats score is low (Impact), which is consistent with the limited bundled permissions rather than the live all-sites permission.
Whale - Product Importer Chrome extension security report
ID: kbafhdilfajbnblffmkjdohcdjbneodi
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- WeSales
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Address
- 777 Brockton Avenue Abington, MA 2351 US
- Website
- Visit
Screenshots & videos
Install growth
125 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Import product from Aliexpress, Alibaba, Amazon to Shopify, BigCommerce, WooCommerce
Read the publisher’s full description
DSReviews is a powerful partner to any shop owners who are having drop shipping business with AliExpress. Online shoppers today rely heavily on customer reviews when they are making a purchasing decision. GetReviews automatically imports authentic AliExpress reviews into your online store and give you a full control to what to appear on your own store review box that strengthen products credibility to boost sales volume. Why GetReviews become a powerful tool to your business? Import authentic reviews from AliExpress back to your online store Increase conversion rate by showcasing customer reviews on site. Drive high-intent traffic by displaying ratings in organic search results and Google Ads. Easy to add review widget to your site without coding required. Showcase Reviews In Style Turn on/Turn off different display elements (i.e. Customer name, Date, Photo, etc.) Design your own box review appearance Write your own language with the editable boxes. Get 1,000 reviews in approximately 30s EFFORTLESS REVIEW IMPORTING Review importing: Just add the URL of the product you want to get reviews and GetReviews will do the rest. Write review manually: You can create your own content, or ask customers to leave their feedback with picture reviews supported. Advanced filter: Choose which reviews should be imported by Star options (all-star, only 4 stars, only 5 stars…), Reviews with pictures/ content. Advanced blacklist: Filter reviews that contain keywords you don’t want to show. BUILD CREDIBILITY AND TRUST IN STYLE - Theme customization: Edit your review widget to fit your style with eye-catching layouts. - Review management: Easy to manage, publish or delete reviews based on your need. - Display settings: Control which information you want to show in your review section like Country, Personal info, Avatar, Picture... BOOST YOUR TRAFFIC In-line SEO support: Add schema & meta tags to review widget for Google Rating & better SEO result. Dropshipping Aliexpress Reviews
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
125 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from WeSales
- WeSales Improves Linkedin16 users
Popular in Shopping
- PayPal Honey: Automated Coupons & Rewards13,000,000 users
- Avira Safe Shopping7,000,000 users
- 中国工商银行密码扩展5,656,728 users
- Capital One Shopping: Save Now5,240,703 users
- Keepa - Amazon Price Tracker5,000,000 users