Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: Fun Cursors

HIGH RISK

Fun Cursors

ID: fifmamcgakmdooafeplohbidenfjhmhm

Supported Languages

🇺🇸English

🇩🇪German

🇮🇹Italian

🇪🇸Spanish

Extension Info & Metadata

Status

Active

Version

0.0.5

Size

0.12 MB

Rating

2.9/5

Reviews

Users

6,000

Type

Extension

Updated

Dec 28, 2022

Publisher Contextual Analysis

Trusted

Author: http://appdepot.xyz/View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Have fun browsing the web with a new mouse cursor.

Spice up your browsing on Chrome by changing your cursor for a fun one. This extension gives you new cursors for your mouse / trackpad on Chrome. You can always get back your default cursor by clicking cancel. *** version 0.05 **** - Cursor works in Library window. - Automatically update cursor on all open tabs. - Manifest V3. Please note cursor cannot work on the Chrome store pages and new tab.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-33.33%(-3,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 60 ratings

Average Rating

Current: 2.97 / 5.0+0.03

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High4

Medium0

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.5 Code review	4

Extension Version	Code Review Findings
0.0.5	4

Files with findings

2 distinct paths — top paths by unique finding count:

background.js3
page.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	page.js (line 1)	The content script — running on `<all_urls>` — reads an arbitrary `css` value from `chrome.storage.local` and injects it as a `<style>` element on every page. Because the value is treated as opaque CSS text and stored…	0.0.5
2	Data Exfiltration	high	background.js (line 3)	The remote endpoint's JSON response (`json['success']`) is written into `chrome.storage.local`, and the content script (`page.js`) reads `css` from `chrome.storage.local` and injects it into every page via a `<style>`…	0.0.5
3	Obfuscation	high	background.js (line 1)	Hardcoded `release_date` Unix timestamp (1528156800 → 2018-06-05) gates the network beacon — the extension only contacts `csp1.xyz` after this date has passed. Time-bomb gates are a classic technique used to bypass Ch…	0.0.5
4	Tracking	high	background.js (line 1)	On install/update the extension beacons to a third-party domain `csp1.xyz` (a low-reputation, non-vendor domain) sending the extension ID, version, install timestamp, and reason. This is unauthorized telemetry/trackin…	0.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


csp1.xyz	/extension/installed.php	https://csp1.xyz/extension/installed.php?id=
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

si sale :v no se quejen

José Bautista·11 Feb 2024

tuyệt

6D, Vi Ngọc Linh·15 Apr 2023

No me gustó para nada, los cursores no se pueden poner... Recomiendo Custom Cursor es super útil tiene muchos cursores Me gustaría que mejoraran esta app pero bueno en resumen no me gusto nada

Kianeth Islas·28 Feb 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

Fun Cursors

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating