Is Labubu Cursor safe?

Low risk

Labubu Cursor accepts postMessage commands from any web page and fetches attacker-supplied URLs with the user's credentials.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

MizuFluxv1.1Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 9 September 2026jfchdkldhkbpbhjihbogidmefcpnfaip