[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Hello Kitty Cursor ♥ Custom Cursor for Chrome™

Version 1.01.08 View in Chrome Web Store

Last scanned: about 20 hours ago

Extension Details

Rating: 3.8 ★ (5 ratings)

Users: 2,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a relatively small user base of 2,000 users with a modest 3.8-star rating from only 5 reviews, which provides limited confidence in its reliability. The lack of developer information and missing last updated date raises transparency concerns. However, the extension's purpose as a cursor customization tool is straightforward and commonly requested by users.

Concerns:

The primary concern is the broad content script injection capability that allows the extension to run on all websites (*://*/*). This is excessive for a simple cursor customization tool, which should only need to modify visual elements rather than access all web content. While the storage permission is reasonable for saving cursor preferences, the combination with universal website access creates potential for data collection or malicious behavior. The extension could theoretically read sensitive information from banking sites, social media, or other personal accounts.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to non-sensitive browsing activities. This isolates any potential risks from your main browsing profile containing important accounts and personal data. Alternatively, look for cursor customization extensions with more restrictive permissions that don't require access to all websites. Monitor your browsing behavior for any unusual activity if you choose to install this extension in your main profile.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "Hello Kitty Cursor ♥ Custom Cursor for Chrome™",
  "icons": {
    "16": "img/icon16.png",
    "48": "img/icon48.png",
    "128": "img/icon128.png"
  },
  "action": {
    "default_popup": "cursorpopup.html"
  },
  "version": "1.01.08",
  "background": {
    "service_worker": "cursorbackground.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Enjoy 60 adorable Hello Kitty cursors! Cute faces, outfits & more for a kawaii browser look.",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "cursorcontent.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*/*"
      ],
      "all_frames": true
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "cur/*.*"
      ]
    }
  ]
}

by ✦ Astarte

https://yowgames.com/hello-kitty-cursor-%e2%99%a5-custom-cursor-for-chrome/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install	https://yowgames.com/hello-kitty-cursor-%e2%99%a5-custom-cursor-for-chrome/?utm_source=Uninstall&utm_medium=link&utm_campaign=bg&utm_content=Uninstall
https://chrome.google.com/webstore/detail/	https://fonts.googleapis.com/css2?family=Nunito:wght@400
https://yowgames.com/hello-kitty-cursor-%e2%99%a5-custom-cursor-for-chrome/?utm_source=getcursors&utm_medium=link&utm_campaign=bg&utm_content=getcursors	https://clients2.google.com/service/update2/crx
https://fonts.googleapis.com/css2?family=Poppins:wght@500&display=swap

Hello Kitty Cursor ♥ Custom Cursor for Chrome™

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (7 total):

Raw Manifest

Detections

Manifest Findings