I forked this to use a different exploit which takes advantage of pointer-events: none.

https://github.com/Rob-ot/Fake-Mouse-Cursor