← Back to context

Comment by ddworken

20 hours ago

Dworken from Anthropic here: This only impacted the extension as it was hosted on the Cursor marketplace. It did not impact the official VS Code extension marketplace or OpenVSX. Users of Claude Code on VS Code are not impacted by this issue.

4 comments

ddworken

Reply
arm32  14 hours ago

Hi Dworken from Anthropic, how is that possible if Cursor uses OpenVSX?

  • zbentley  10 hours ago

    It seems like they put a proxy in front of OpenVSX: https://cursor.com/help/customization/extensions

    However, statements around the internet (and in these comments) are less than definitive as to whether a) that proxy has a cache that was compromised; b) that proxy has select extensions which can be published directly to it by hand (one of which was compromised); c) other.

matt3210  11 hours ago

Thanks! I would believe it more it if you shared your system prompt so I can make sure its really you.