Comment by philipwhiuk
19 hours ago
I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.
19 hours ago
I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.
>the corporate laptop
an anthropic laptop? why are you sketpical?
I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.
In fairness, that is very surprising.
Reading between the lines, it seems like Anthropic isn't involved in the "official by Anthropic" extension at all.
Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.
2 replies →
Exactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?
Because what they had was some kind of admin access to Cursor's mirror of OpenVSX, and not anything else.