Yeah, no hack required.
The CueCat just outputted keyboard data via the PS/2 interface, which was the most common keyboard connection at the time, and with the correct 3rd party software it could be used to decode any UPC barcode without having to install the official spyware software.