Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Naruto Cursor

CRITICAL RISKRemoved from Chrome Web Store

Naruto Cursor

ID: mknehdpfojndojhmpkljgnjfnchoeaem

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.20.28.8

Size

0.42 MB

Rating

5.0/5

Reviews

Users

971,254

Type

Extension

Updated

Feb 13, 2021

Publisher Contextual Analysis

Trusted

Author: https://nicecursor.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,065,286

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Naruto cursor for chrome. Choose your favorite Naruto anime cursor with this extension. Created for Naruto fans.

Customize your browser experience by using Naruto cursor chrome extension. Naruto Cursor Extension Features: 1. Give you different Naruto cursor design for you to replace default cursor. 2. Click on the task bar extension icon located at right hand top corner to open up Naruto cursor setting box. ------------------- ! After installing this extension, refresh the previously opened tab if you want to use it on this page. ! According to the rules of the Chrome Web Store extension can not work on the store pages and home page. Please open any other website (for example, google.com) after installing this extension and check how the extension will work on it. ------------------- By installing this extension, you agree to the End User License Agreement (https://nicecursor.com/eula/) and Privacy Policy (https://nicecursor.com/privacy-policy/) Homepage: https://nicecursor.com/naruto-cursor-for-chrome If you have any questions about our Naruto cursor extension or just want to give us some feedback, feel free to send us a message or write a review! We'd love to hear from you.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.20.28.8 Code review	7

Extension Version	Code Review Findings
1.20.28.8	7

Files with findings

6 distinct paths — top paths by unique finding count:

background.js2
content.js1
manifest.json1
popup.css1
popup.html1
popup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	content.js (line 23)	The function `EventElementFP` — where 'FP' is a common abbreviation for 'fingerprint' — registers a persistent `mousemove` listener on every website visited. It samples DOM element types, class names, and computed cur…	1.20.28.8
2	Unauthorized Data Collection	high	manifest.json (line 13)	The content script is injected at `document_start` — before the page's own DOM or scripts load — into ALL frames on ALL URLs. This is the most aggressive possible injection posture and means the extension code runs on…	1.20.28.8
3	Privilege Escalation	medium	background.js (line 1)	On installation, the extension enumerates every currently-open HTTP/HTTPS tab and forcibly injects `content.js` into all frames via `chrome.tabs.executeScript`. This is unnecessary for a cursor extension (the manifest…	1.20.28.8
4	Remote Code Loading	medium	popup.js (line 1)	The `includeFile` function dynamically creates a `<script>` element and appends it to the popup's document head. It is a general-purpose remote script loader that accepts any URL string — currently called only with th…	1.20.28.8
5	Tracking	medium	background.js (line 20)	On install, the extension hijacks the user's current active tab by navigating it to a marketing URL that includes the `chrome.runtime.id` as a tracking identifier. This silently replaces whatever the user was viewing.…	1.20.28.8
6	Tracking	low	popup.html (line 124)	The popup contains an affiliate referral link to `coolthemestores.com` with UTM tracking parameters identifying the source as this extension. This is a monetisation link that benefits the extension operator when users…	1.20.28.8
7	Tracking	low	popup.css (line 1)	The popup stylesheet imports a Google Font over the network on every popup open, which allows Google to record the timing and frequency of popup renders. While individually minor, combined with the install-time tracki…	1.20.28.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


nicecursor.com	/uninstall	https://nicecursor.com/uninstall?utm_campaign=Extensions&utm_medium=uninstall&utm_source=naruto
nicecursor.com	/naruto-cursor-for-chrome	https://nicecursor.com/naruto-cursor-for-chrome?utm_campaign=Extensions&utm_medium=newinstall&utm_source=
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Poppins:wght@500&display=swap
coolthemestores.com	-	https://coolthemestores.com/?utm_campaign=referral&utm_medium=cursorbox&utm_source=nicecursor_naruto

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.20.28.8	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Nice quality of work. Cursor designs is great. Love this Naruto theme.

Liv ShiJie Tan·28 May 2021

Super love this naruto cursor extension. Recommended.

Asher Goh·18 May 2021

Super nice design with Naruto theme. Great work as always.

Jolene Lim·11 May 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Naruto Cursor

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating