Is Best Cursors - Bloom of Custom Cursors safe?
Best Cursors exposes a stored user identifier and cursor collection to any website via unguarded message handlers.
The extension's content script responds to postMessage requests from any web page—without checking the caller's origin—by returning a persistent user ID stored in local storage. Its background script additionally accepts external messages from any website, allowing any page to read the full list of downloaded cursors or write arbitrary cursor data into extension storage. No domain restrictions or authentication checks are applied to these interfaces.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itbestcursors - no other listings under this identity
bestcursors - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Schedule its own background tasks
alarms
Store data in your browser
storage
Run its own code inside the pages you visit
scripting