Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeCrxMouse: Mouse Gestures
Findings · 3
+1 more finding locked
HIGH FINDINGS · 3
  1. 01Remote-configurable obfuscated constants (Proconstantinator) fetched from api.mousegesturesapi.com/version/config control extension behavior including tracking endpoint and PII filter rules
  2. 02Full browsing history (URL, referrer, redirect chain, link clicks) transmitted to api.mousegesturesapi.com/ms/gs on every page navigation when user opts in
  3. 03Remotely-configured XHR response interceptor in content scripts can extract and exfiltrate arbitrary data from any page's network responses based on server-supplied rules
+1 more finding locked
OTHER EXTENSIONS

Is CrxMouse: Mouse Gestures safe?

High risk

No summary available.

infov6.4.2Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+1 more finding not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026jlgkpaicikihijadgifklkbpdajbkhjo

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact