Chrome Web Store
2Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Spy x Family Cursor - Custom Anime Cursor for Chrome showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in March 2026.

Analyst notes

The entire code surface is a local cursor-skinning extension: re-injects its own on install, writes a CSS rule into its own <style> element using canvas-generated data: URLs from chrome.storage.local, and the React popup () reads only the packaged There is no script anywhere except fetch(" ") (:20,84), no externally_connectable and no message listener, so nothing off-page can write the cursor_image1 value that interpolates; the bundled manifest matches the published CWS manifest exactly. Contradicting the 0.90 ML score: zero network sinks in code, chrome-stats, and an exact manifest match. Corroborating it only as context (not code evidence): the Unit 42 IOC note, 'publisher flagged malicious' and malicious siblings — which are plausibly one MalExt feed import, not three independent signals. I withhold false_positive because the only external touchpoints — the install tab and setUninstallURL to [domain withheld] (:54,80-83), the publisher's own homepage_url — are exactly the kind of landing-page funnel a designation describes, and that cannot be adjudicated from the shipped code; this is a concern, not a code finding.

Spy x Family Cursor - Custom Anime Cursor for Chrome

Spy x Family Cursor - Custom Anime Cursor for Chrome Chrome extension security report

ID: oiogpbnonmepejhhmhgnmmpofkknomcf

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇧🇬Bulgarian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇹🇷Turkish
🇺🇦Ukrainian

Extension Info & Metadata

Status
Active
Version
1.0.4
Size
10.51 MB
Rating
0.0/5
Reviews
0
Users
435
Type
Extension
Updated
Mar 10, 2026
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
20extensions
2 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
HeroEXT
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
20
Active
18
Obsolete
2
Listed
20
Unlisted
0
Users
13,436

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Navigate through the digital world with Spy x Family cursors. Perfect for fans of Loid, Yor, Anya & secret missions!

Read the publisher’s full description

Transform your browsing experience with the thrilling world of espionage and family comedy! This premium Chrome extension replaces your standard cursor with iconic symbols from the beloved anime and manga series that has captured hearts worldwide with its perfect blend of action, comedy, and heartwarming family moments. ✨ Key Features: • Ultra-High Quality Graphics - Crystal-clear, professionally designed cursors that perfectly capture the stunning visual style of Spy x Family • Smart Cursor Customization - Easily adjust cursor size and opacity to match your browsing preferences • Quick Favorites System - Save and instantly access your most-loved Spy x Family cursor designs • Zero Lag Performance - Optimized lightweight code ensures seamless browsing without any slowdown • Instant Toggle Control - One-click enable/disable functionality for maximum convenience 🎯 How to Use: 1. Install the extension directly from the Chrome Web Store 2. Click the Spy x Family Cursor icon in your browser toolbar 3. Browse through our extensive collection of anime-themed cursor designs 4. Select your favorite cursor featuring Loid, Yor, Anya, Bond, or other beloved characters 5. Customize cursor size using the intuitive size slider 6. Experience your new Spy x Family-powered browsing adventure! 🌟 Why Choose Our Spy x Family Cursor Extension: User-Friendly: Simple installation and intuitive interface Safe & Secure: No data collection, completely privacy-focused Free to Use: Access amazing Spy x Family cursors at no cost

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
7

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.4
Latest
10.51 MBNo malware found0
9b140fba4e0dbda67a0e6dc4b766ee8716e00c149a11b120f9a34ee204ee7320
1.0.3
10.50 MBNot scanned—
9b140fba4e0dbda67a0e6dc4b766ee8716e00c149a11b120f9a34ee204ee7320
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.