Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Custom Cursor Pack

CRITICAL RISKRemoved from Chrome Web Store

Custom Cursor Pack

ID: kmjaecainjoaomeebaofnnbobomfigoa

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.7.7

Size

2.09 MB

Rating

2.7/5

Reviews

Users

120,362

Type

Extension

Updated

Feb 9, 2021

Publisher Contextual Analysis

Author: Becky MasonView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

120,417

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Never use a cursor you don't like again

Custom Cursor Pack changes cursors on web pages opened in the browser. 🙂 Hundreds of cursors manually selected and categorized 📁 Upload your cursor (use 128x128 image) You can change the cursor back to normal by disabling it. Open extension’s popup from the toolbar to do it. Please note: the cursor couldn’t be changed if the mouse is over browser elements e.g. toolbar, search box, or context menus. It works if the mouse pointer is over a page.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.7.7 Code review	3

Extension Version	Code Review Findings
1.7.7	3

Files with findings

2 distinct paths — top paths by unique finding count:

bg.js2
js/customCursor.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	js/customCursor.js (line 214)	selected.cursor.path and selected.pointer.path are interpolated directly into a multi-selector CSS block via string replacement and then written to sheet.innerHTML without sanitization. Because set_config (bg.js:18521…	1.7.7
2	Unauthorized Data Collection	high	bg.js (line 18463)	Any external website that knows the extension ID (publicly available as kmjaecainjoaomeebaofnnbobomfigoa) can call get_config to exfiltrate all local storage or set_config to overwrite any storage key with no origin c…	1.7.7
3	Obfuscation	medium	bg.js (line 1)	The 456KB background script bundles the full RxJS reactive-programming library (~10,000 lines) which is never used by the background class or any other extension file. Combined with CSP whitelisting google-analytics.c…	1.7.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
goo.gl	/pxwQGp	https://goo.gl/pxwQGp
popper.js.org	-	https://popper.js.org
github.com	/twbs/bootstrap/issues/24251	https://github.com/twbs/bootstrap/issues/24251
www.quirksmode.org	/blog/archives/2014/02/mouse_event_bub.html	https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html
jquery.com	-	http://jquery.com/
sizzlejs.com	-	http://sizzlejs.com/
jquery.org	/license	http://jquery.org/license
jsperf.com	/thor-indexof-vs-for/5	http://jsperf.com/thor-indexof-vs-for/5
www.w3.org	/TR/css3-selectors/	http://www.w3.org/TR/css3-selectors/#whitespace

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.7 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

No es de mi estilo

Sahyli·1 Apr 2021

i cant remove the cursor when i uninstall it from chrome and none of the cursors work even when its of of chrome the cursor is still there

Vemm See·30 Mar 2021

cool

Oddictivated 1M·11 Mar 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Custom Cursor Pack

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews