Security Warning: Historically Flagged as Malware

This extension is historically labeled as malware, but the current version analysis does not yet confirm severe malicious findings.Extension: Poppy Playtime Cursor ★ Custom Cursor for Chrome™

HIGH RISKStill available - needs review

Poppy Playtime Cursor ★ Custom Cursor for Chrome™

ID: knomkjoeecgejmhchcpmpbdpfdphpgpo

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.01.14

Size

1.98 MB

Rating

4.3/5

Reviews

Users

874

Type

Extension

Updated

Nov 30, 2025

Publisher Contextual Analysis

Trusted

Author: https://owhit.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

143

Active

Obsolete

Listed

143

Unlisted

Total Users

62,014

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse with 100+ Poppy Playtime cursors Huggy Wuggy, Kissy Missy, Mommy Long Legs & more!

Step into the eerie world of Playtime Co. and bring the toys to life on your screen! 🧸👁️ Enjoy over 100+ custom cursors featuring Huggy Wuggy, Kissy Missy, Mommy Long Legs, and more — all in vibrant, creepy, and playful designs inspired by the hit horror-puzzle game. 🔹 Features 🧸 100+ Unique Cursors – Iconic characters, toys, and props from Poppy Playtime. ⭐ Favorites System – Save and switch your top cursors instantly. 📏 Adjustable Size – Resize your cursor between 16px and 128px. ⚡ One-Click Swap – Change cursors instantly with one click. 🔘 Toggle Button – Easily enable or disable anytime. 🚀 Lightweight & Fast – Smooth performance without lag. 🎯 Why Poppy Playtime Cursor? 🎮 Horror & Fun – Add a mix of scares and charm to your browser. 👾 Fan Favorites – From Huggy Wuggy to the latest toy monsters. 🖥️ Simple Interface – Easy navigation and quick access. 🎨 Fan-Made – Created by fans for fans of Poppy Playtime. 📌 Note: This extension is not affiliated with MOB Games or the official Poppy Playtime franchise. All content is fan-made and unofficial.

User Growth

Showing data from Aug 12, 2025 to Aug 02, 2026

Versions

-14.2%(-142 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 10 ratings

Average Rating

Current: 4.30 / 5.0+4.30

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium2

Low3

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.01.14 Code review	5

Extension Version	Code Review Findings
1.01.14	5

Files with findings

4 distinct paths — top paths by unique finding count:

cursorcontent.js2
cursorbackground.js1
cursorpopup.html1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	medium	cursorcontent.js (line 20)	The content script builds a CSS string using template literals with values read directly from chrome.storage.local (`data.default_cursor_result`, `data.pointer_cursor_result`) and injects it as a style element into ev…	1.01.14
2	Tracking	medium	cursorcontent.js (line 79)	The content script installs a full-document MutationObserver that specifically detects IFRAME and FRAME element insertions across every webpage. While claimed to be for cursor re-application, this gives the extension …	1.01.14
3	Other	low	manifest.json (line 13)	The content script runs at `document_start` (before DOM parsing begins) on every URL including all iframes (`all_frames: true`). This is the most privileged content script execution timing and scope combination, givin…	1.01.14
4	Tracking	low	cursorbackground.js (line 2)	On install the extension opens a tab navigating to a third-party domain (`yowgames.com`) with UTM tracking parameters, and registers an uninstall URL to the same domain. This sends installation and uninstall events to…	1.01.14
5	Tracking	low	cursorpopup.html (line 13)	The popup loads a Google Fonts stylesheet from an external CDN (`fonts.googleapis.com`) every time the popup is opened. This causes the user's IP address and browser fingerprint to be sent to Google's servers on each …	1.01.14

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


yowgames.com	/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/	https://yowgames.com/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install
yowgames.com	/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/	https://yowgames.com/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/?utm_source=Uninstall&utm_medium=link&utm_campaign=bg&utm_content=Uninstall
chrome.google.com	/webstore/detail/$%7BextensionId%7D/reviews%60;	https://chrome.google.com/webstore/detail/${extensionId}/reviews`;
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap
yowgames.com	/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/	https://yowgames.com/poppy-playtime-cursor-%e2%98%85-custom-cursor-for-chrome/?utm_source=getcursors&utm_medium=link&utm_campaign=bg&utm_content=getcursors
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.attribution.com	/ads/1.0/	http://ns.attribution.com/ads/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/pdf/1.3/	http://ns.adobe.com/pdf/1.3/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.3 out of 5 · 6 most recent reviews

Text reviews

Positive

Negative

I love it

Lucas Brnovic·8 Jun 2026

só queria que funcionasse em todas as abas, mas é muito bom

Duda·24 May 2026

absolut cinema

oum·13 May 2026

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: Historically Flagged as Malware

Poppy Playtime Cursor ★ Custom Cursor for Chrome™

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating