Comment by ddworken
20 hours ago
Dworken from Anthropic here, this did not involve a compromise of any Anthropic systems. A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this. The versions on our official channels including VS Code and OpenVSX are not affected and this only impacts Cursor users.
I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.
>the corporate laptop
an anthropic laptop? why are you sketpical?
I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.
In fairness, that is very surprising.
3 replies →
Exactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?
1 reply →