@jerome @GossiTheDog

Ok, so it seems that Cursor has some overlay over Open-VSX. If Anthropic is working specifically with Cursor then the damage might actually be limited to Cursor? Gotta ask again, though, what are the odds that only the Claude Code extension was compromised? Assuming the payload of the hack is the same and the detection signals are, my guess is that anyone using Cursor should use the detection steps published just in case.

@jerome @GossiTheDog

So, stupid question: if it was not igorkofman's systems or accounts that were compromised but Open-VSX itself, then what are the chances that the only extension compromised today is the Claude Code one?

@christmastree @GossiTheDog

My take on this is: version ...313 is missing on the VSCode Marketplace. This does not mean it was never there. Anthropic have not said anything to the millions of users who use the extension in VSCode via the Microsoft Marketplace. Would they not have if all was well?