Hacker News Reader

I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.

>the corporate laptop

an anthropic laptop? why are you sketpical?

I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.

In fairness, that is very surprising.

Reading between the lines, it seems like Anthropic isn't involved in the "official by Anthropic" extension at all.

Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.

Wow if that is the case… Cursor certainly needs to communicate much more clearly that Anthropic wasn’t involved in this at all.

Cursor is now Grok, so are you really surprised?

Exactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?

Because what they had was some kind of admin access to Cursor's mirror of OpenVSX, and not anything else.

Reply on news.ycombinator.com