Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Custom Cursors

CRITICAL RISKRemoved from Chrome Web Store

Custom Cursors

ID: binlibnahkildmmpmmbhckchbdhjacal

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.1.1

Size

0.08 MB

Rating

3.5/5

Reviews

Users

250,582

Type

Extension

Updated

Mar 17, 2021

Publisher Contextual Analysis

Author: alladereveshkovaView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

250,582

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

A large collection of cursors where you will definitely find the cursor you like

Let`s bring something special to your everyday browsing. Install Custom cursor extension and renew this boring default cursor. There is a great library of colorful and bright custom cursor to decorate your chrome browser. You can easily apply default cursor if you need just by clicking on “default cursor” button. Customize your chrome browser the way you want. There is custom cursor for everyone. Just install the extension and have fun!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium2

Low2

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.0 Code review	4

Extension Version	Code Review Findings
1.1.0	4

Files with findings

2 distinct paths — top paths by unique finding count:

custom_script.js2
humus_observer.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	medium	humus_observer.js (line 7)	On install, the extension enumerates every open tab and force-injects its content script into each one. With `tabs` plus `<all_urls>`, this gives it immediate code execution across the user's browsing session, which i…	1.1.0
2	Code Injection	medium	custom_script.js (line 79)	The content script builds CSS rules from stored/message-provided URLs and writes them into a `<style>` element using `innerHTML` on every visited page. That is effectively dynamic CSS injection across `<all_urls>`; if…	1.1.0
3	Obfuscation	low	custom_script.js (line 1)	The extension registers a page-wide `mousemove` handler on every matched site and uses heavily mangled variable names throughout the code. The behavior here appears related to cursor replacement rather than data theft…	1.1.0
4	Tracking	low	humus_observer.js (line 52)	The background page fetches cursor assets by assigning arbitrary URLs to hidden `img` elements, renders them into a canvas, and redistributes the result to tabs. This creates an external network-request surface contro…	1.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

486

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


cdn.custom-cursor.com	/packs/328/ext/Baseball.png	https://cdn.custom-cursor.com/packs/328/ext/Baseball.png
cdn.custom-cursor.com	/db/cursor/pointer_1240.png	https://cdn.custom-cursor.com/db/cursor/pointer_1240.png
cdn.custom-cursor.com	/db/pointer/pointer_1239.png	https://cdn.custom-cursor.com/db/pointer/pointer_1239.png
cdn.custom-cursor.com	/packs/639/ext/Tennis.png	https://cdn.custom-cursor.com/packs/639/ext/Tennis.png
cdn.custom-cursor.com	/db/cursor/pointer_1862.png	https://cdn.custom-cursor.com/db/cursor/pointer_1862.png
cdn.custom-cursor.com	/db/pointer/pointer_1861.png	https://cdn.custom-cursor.com/db/pointer/pointer_1861.png
cdn.custom-cursor.com	/packs/390/ext/Cheerleading.png	https://cdn.custom-cursor.com/packs/390/ext/Cheerleading.png
cdn.custom-cursor.com	/db/cursor/pointer_1364.png	https://cdn.custom-cursor.com/db/cursor/pointer_1364.png
cdn.custom-cursor.com	/db/pointer/pointer_1363.png	https://cdn.custom-cursor.com/db/pointer/pointer_1363.png
cdn.custom-cursor.com	/packs/129/ext/Basketball.png	https://cdn.custom-cursor.com/packs/129/ext/Basketball.png

Showing 1 to 10 of 490 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

gracias, se me habia buggeado con otro cursor bien feo y esto hizo que por fin se quitara, aparte de eso los diseños son simples pero bonitos

Diana Guerrero·15 Mar 2021

This doesn't work when I click on something nothing happens

HyperMane·8 Mar 2021

I couldn't turn it on And when i waited like "vihaan savir" said it still wont work.

Nabta El shikh

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Custom Cursors

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews