When you run a linter, for example, then it should stop executing cider once it stops. And not be able to spawn long-running background tasks for infiltration.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:07:55.000Z","created_at_i":1793383675,"id":50307877,"options":[],"parent_id":50304408,"points":null,"story_id":50300683,"text":"I\u2019m fine with that. I use a top-level directory for all of my code, and restricting extension access to that directory is a great idea.","title":null,"type":"comment","url":null},{"author":"none_to_remain","children":[{"author":"ashishb","children":[],"created_at":"2026-10-31T00:01:40.000Z","created_at_i":1793404900,"id":50311767,"options":[],"parent_id":50308978,"points":null,"story_id":50300683,"text":"Don't mount all your code every time.
E.g. when working on a frontend only project, you don't need to mount the backend directory and vice-versa. This limits the attack radius.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T19:26:07.000Z","created_at_i":1793388367,"id":50308978,"options":[],"parent_id":50304408,"points":null,"story_id":50300683,"text":"If all the code and data eventually move into the dedicated user account, why wouldn't it also eventually move into the container/vm?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:26:38.000Z","created_at_i":1793370398,"id":50304408,"options":[],"parent_id":50304313,"points":null,"story_id":50300683,"text":"Dedicated user account does not work as eventually all your code and data will move under that.
I run it in an ephemeral container sandbox (https://github.com/ashishb/amazing-sandbox) which has access to the current working directory and it drastically limits the attack radius.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:20:28.000Z","created_at_i":1793370028,"id":50304313,"options":[],"parent_id":50304251,"points":null,"story_id":50300683,"text":"Probably a good idea to only run LLMs with a dedicated user account, or in a container.","title":null,"type":"comment","url":null},{"author":"no-name-here","children":[],"created_at":"2026-10-30T15:14:44.000Z","created_at_i":1793373284,"id":50305094,"options":[],"parent_id":50304251,"points":null,"story_id":50300683,"text":"For locally installed Code / Code-fork extensions, there is not any concept of permissions (at least on Windows or MacOS (+ the 3rd party code-server running on Linux)), correct?","title":null,"type":"comment","url":null},{"author":"fg137","children":[],"created_at":"2026-10-30T16:18:07.000Z","created_at_i":1793377087,"id":50306090,"options":[],"parent_id":50304251,"points":null,"story_id":50300683,"text":"It shouldn't.
Be as close as AGI we are (/s), this issue from 2018 is still open:
https://github.com/microsoft/vscode/issues/52116
I don't know what we are doing.","title":null,"type":"comment","url":null},{"author":"idontwantthis","children":[],"created_at":"2026-10-30T18:01:49.000Z","created_at_i":1793383309,"id":50307786,"options":[],"parent_id":50304251,"points":null,"story_id":50300683,"text":"Does it? It asks for permission to use whatever directory you call it in.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:16:39.000Z","created_at_i":1793369799,"id":50304251,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"The extensions does not need full access to the laptop.
When you are invited to someone's living room, you don't get to access their bedroom.
The idea that Claude should have full data access to the home directory is wrong. And as an industry leader, Claude has set a bad precedence.","title":null,"type":"comment","url":null},{"author":"fishfasell","children":[{"author":"ddworken","children":[{"author":"junofan","children":[{"author":"no-name-here","children":[],"created_at":"2026-10-30T15:28:39.000Z","created_at_i":1793374119,"id":50305302,"options":[],"parent_id":50304968,"points":null,"story_id":50300683,"text":"> Cursor routes extension search and downloads through its own marketplace proxy (marketplace.cursorapi.com), not a direct passthrough to Open VSX.
https://cursor.com/help/customization/extensions","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:06:46.000Z","created_at_i":1793372806,"id":50304968,"options":[],"parent_id":50304489,"points":null,"story_id":50300683,"text":"Is the extension not Anthropic.claude-code developed by Anthropic? Been a while since I used Cursor.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:33:09.000Z","created_at_i":1793370789,"id":50304489,"options":[],"parent_id":50304277,"points":null,"story_id":50300683,"text":"Dworken from Anthropic here, yes this is correct. This is a third-party marketplace that we are not involved in owning, maintaining, deploying, or reviewing.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:18:27.000Z","created_at_i":1793369907,"id":50304277,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"I'm assuming there is no way to prevent this without Cursor improving their extension vetting? Seems like folks are confused in the comments here. To me, this is a 3rd party marketplace that lives outside of Anthropic's governance, is that correct?","title":null,"type":"comment","url":null},{"author":"JeremyNT","children":[{"author":"nikanj","children":[{"author":"lifeisloving","children":[{"author":"user43928","children":[{"author":"quantumwannabe","children":[],"created_at":"2026-10-30T16:14:43.000Z","created_at_i":1793376883,"id":50306040,"options":[],"parent_id":50304857,"points":null,"story_id":50300683,"text":"The team behind Cursor and their data were worth $60 billion to Musk, not the app itself.","title":null,"type":"comment","url":null},{"author":"criley2","children":[],"created_at":"2026-10-30T17:51:49.000Z","created_at_i":1793382709,"id":50307619,"options":[],"parent_id":50304857,"points":null,"story_id":50300683,"text":"Considering that the biggest and most successful play for SpaceXAI in the AI space has been "Sell compute to Anthropic" I also wouldn't say that all of the grok junk has been obviously successful, either.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:58:18.000Z","created_at_i":1793372298,"id":50304857,"options":[],"parent_id":50304432,"points":null,"story_id":50300683,"text":"Cursor made Grok Bot and is working on the Grok models.
I wouldn't say it's obviously unsuccessful.","title":null,"type":"comment","url":null},{"author":"jmull","children":[{"author":"john_strinlai","children":[{"author":"jmull","children":[{"author":"sumeno","children":[{"author":"simondotau","children":[{"author":"jmull","children":[],"created_at":"2026-11-01T19:15:38.000Z","created_at_i":1793560538,"id":50328711,"options":[],"parent_id":50312303,"points":null,"story_id":50300683,"text":"Aren't you hitting yourself in the face?","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T01:21:28.000Z","created_at_i":1793409688,"id":50312303,"options":[],"parent_id":50310892,"points":null,"story_id":50300683,"text":"There is a difference in moderation policy. There is no difference in the intellectual poverty demonstrated by the purveyor of such insults. If anything, the opposite is true, since a target-rich subject like Musk requires no hyperbole to ridicule.","title":null,"type":"comment","url":null},{"author":"jmull","children":[],"created_at":"2026-11-01T18:58:10.000Z","created_at_i":1793559490,"id":50328525,"options":[],"parent_id":50310892,"points":null,"story_id":50300683,"text":"Musk can take care of himself. I'm just disappointed by the ageism.
Age-based bigotry, the most acceptable of bigotries!","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T22:21:07.000Z","created_at_i":1793398867,"id":50310892,"options":[],"parent_id":50306996,"points":null,"story_id":50300683,"text":"There's a difference between insulting the richest man to ever live and another poster on a message board","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T17:14:59.000Z","created_at_i":1793380499,"id":50306996,"options":[],"parent_id":50306120,"points":null,"story_id":50300683,"text":"Fair enough, though shouldn't insults have been left out entirely?
It's interesting what is considered acceptable and what isn't.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T16:19:51.000Z","created_at_i":1793377191,"id":50306120,"options":[],"parent_id":50305159,"points":null,"story_id":50300683,"text":""boomer", as an insult, describes a pattern of behavior and/or a mindset often attributed to the baby boomer generation, but not restricted to it.
(you could have left out your little jab. it adds nothing to the conversation except flavoring your comment with smugness)","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:19:18.000Z","created_at_i":1793373558,"id":50305159,"options":[],"parent_id":50304432,"points":null,"story_id":50300683,"text":"Musk is solidly gen-x.
(I realize it doesn't matter to those of you with a rather "lo-res" perspective on things. To put it in a nice way.)","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:28:31.000Z","created_at_i":1793370511,"id":50304432,"options":[],"parent_id":50304365,"points":null,"story_id":50300683,"text":"I dont know a single person who uses this tool (but im sure there are some) our annual subs recently ran out, I hadnt used mine in 6 months, we did not renew.
Elon did the typical boomer tech guy thing when they interact with any slightly impressive AI tool.. Lose their fkn mind and spend tons of money on it. He just took it to another level..
Its like those tech boomers that got obsessed with openclaw and instantly started spending 20k a month on a thing that read their calender outloud to them.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:23:14.000Z","created_at_i":1793370194,"id":50304365,"options":[],"parent_id":50304326,"points":null,"story_id":50300683,"text":"I believe the value add was $60bn in just 4 years https://www.linkedin.com/posts/sytaylor_wild-cursor-just-sol...","title":null,"type":"comment","url":null},{"author":"sunaookami","children":[{"author":"airhangerf15","children":[{"author":"anygivnthursday","children":[{"author":"numbsafari","children":[{"author":"kemotep","children":[],"created_at":"2026-10-30T17:02:52.000Z","created_at_i":1793379772,"id":50306810,"options":[],"parent_id":50306247,"points":null,"story_id":50300683,"text":"If Microsoft was any good the entire IT industry would collapse. Millions of high paying careers are built on decades of fixing the garbage that comes out of Redmond. Probably a trillion dollars worth of businesses selling software and support to companies running Microsoft would evaporate as soon as Microsoft doesn\u2019t continue their current efforts.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T16:27:13.000Z","created_at_i":1793377633,"id":50306247,"options":[],"parent_id":50306115,"points":null,"story_id":50300683,"text":"> > I'm still surprised people use CrowdStrike
> I mean, LastPass is still in business...
I mean, Microsoft is still experiencing massive growth.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T16:19:33.000Z","created_at_i":1793377173,"id":50306115,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"> I'm still surprised people use CrowdStrike
I mean, LastPass is still in business...","title":null,"type":"comment","url":null},{"author":"nightski","children":[],"created_at":"2026-10-30T17:47:22.000Z","created_at_i":1793382442,"id":50307545,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"If I had to guess it's that very few people use it for actual security guarantees and most use it just to be able to fill out the questionnaire or compliance box saying "we do this".","title":null,"type":"comment","url":null},{"author":"JoBrad","children":[],"created_at":"2026-10-30T18:04:18.000Z","created_at_i":1793383458,"id":50307823,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"I remember when Crowdstrike was all about mobilizing your spare computer to DDOS the bad guys.","title":null,"type":"comment","url":null},{"author":"lfglopes","children":[],"created_at":"2026-10-30T18:25:55.000Z","created_at_i":1793384755,"id":50308150,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"I had to fill a security questionnaire today. One of the questions was
"Do you use crowdstrike falcon?"","title":null,"type":"comment","url":null},{"author":"Melatonic","children":[],"created_at":"2026-10-30T18:49:24.000Z","created_at_i":1793386164,"id":50308459,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"What do you suggest instead ?
Their Linux stuff has gotten much better but besides the (insanely huge) recent windows debacle I've found them to be a great product","title":null,"type":"comment","url":null},{"author":"tredre3","children":[{"author":"darkwi11ow","children":[],"created_at":"2026-10-30T21:55:06.000Z","created_at_i":1793397306,"id":50310660,"options":[],"parent_id":50309741,"points":null,"story_id":50300683,"text":"I think gp meant DKMS (https://en.wikipedia.org/wiki/Dynamic_Kernel_Module_Support). It allows for things like using same proprietary device drivers across many Linux kernels.","title":null,"type":"comment","url":null},{"author":"airhangerf15","children":[],"created_at":"2026-10-31T13:22:48.000Z","created_at_i":1793452968,"id":50315965,"options":[],"parent_id":50309741,"points":null,"story_id":50300683,"text":"Sorry DKMS. nvidia distributes closed source .o files and most distributes have dkms packages to build those for each kernel.
> Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?
On any Linux distribution, which managed packages update themselves? zero. Crowdstrike should provide package repositories so admins can pull in updates at their regular cadence.
At a minimum, the package should NEVER update its own binaries located in /usr/bin or /opt. If it need to pull updates, those should go in /var. Crowdstrike could have made the core binaries a shim where they load a second stage from /var.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T20:30:46.000Z","created_at_i":1793392246,"id":50309741,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"> They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently)
Neither have I, I think you goofed up on your acronyms? For a driver as embedded as crowdstrike you need to recompile, there's no other way around it. Linux doesn't provide anything stable to target and a shim won't cut it in this case.
> the service ran as root, it UPDATED ITS OWN BINARIES as root!
Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?","title":null,"type":"comment","url":null},{"author":"burger_moon","children":[],"created_at":"2026-10-30T20:34:10.000Z","created_at_i":1793392450,"id":50309784,"options":[],"parent_id":50304870,"points":null,"story_id":50300683,"text":"Crowdstrike and Solarwinds are still being used by nearly every fed govt agency today. It's amazing really that despite everything they still get to suck up our funds.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:59:49.000Z","created_at_i":1793372389,"id":50304870,"options":[],"parent_id":50304405,"points":null,"story_id":50300683,"text":"I'm still surprised people use CrowdStrike. I guess there are no real alternatives. I know companies are getting CrowdStrike alerts for this very issue, but it still just seems like a MASSIVE attack surface.
Back when I was in DevOps, the Linux Falcon Sensor was an absolutely disaster. They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently), the service ran as root, it UPDATED ITS OWN BINARIES as root! It broke nearly ever Linux design philosophy.
I know newer version use eBPF and don't have the stupid kernel lock-in issue, but I still don't trust it.","title":null,"type":"comment","url":null},{"author":"asveikau","children":[],"created_at":"2026-10-30T20:06:42.000Z","created_at_i":1793390802,"id":50309448,"options":[],"parent_id":50304405,"points":null,"story_id":50300683,"text":"I forgot entirely about superfish. That takes me back.
My recollection is part of what uncovered it was that the malware broke WebSockets on Lenovo laptops.
I think higher end Lenovo laptops with cleaner windows images were not affected. And a lot of knowledgeable users wipe the OS anyway.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:26:32.000Z","created_at_i":1793370392,"id":50304405,"options":[],"parent_id":50304326,"points":null,"story_id":50300683,"text":">Perhaps it will be the death knell
People said the same thing about SolarWinds, Lenovo (Superfish), CrowdStrike... Nothing will happen.","title":null,"type":"comment","url":null},{"author":"Aboutplants","children":[{"author":"gpm","children":[{"author":"simondotau","children":[],"created_at":"2026-10-31T01:10:07.000Z","created_at_i":1793409007,"id":50312243,"options":[],"parent_id":50304923,"points":null,"story_id":50300683,"text":"It's highly probable that Russia's top state-controlled hackers have been attempting to exploit/infiltrate SpaceX and Starlink for the past four years.
China has probably being doing so for a decade.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:03:51.000Z","created_at_i":1793372631,"id":50304923,"options":[],"parent_id":50304416,"points":null,"story_id":50300683,"text":"Who says there wasn't?
A lot of the most valuable SpaceX IP (at least to the big "advanced persistent threat" hackers) is probably related to military secrets, information to let you spy on/disable/control star shield/link, and so on. Not things we'd find out about as the general public.","title":null,"type":"comment","url":null},{"author":"numbsafari","children":[],"created_at":"2026-10-30T15:06:23.000Z","created_at_i":1793372783,"id":50304962,"options":[],"parent_id":50304416,"points":null,"story_id":50300683,"text":"I mean, who says it wasn't an inside job...
https://www.cnbc.com/2026/10/30/binance-hack-elon-musk-tesla...","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:27:27.000Z","created_at_i":1793370447,"id":50304416,"options":[],"parent_id":50304326,"points":null,"story_id":50300683,"text":"Seeing as SpaceX owns Curser, I\u2019m surprised there wasn\u2019t a hack on SpaceX\u2026 Yet","title":null,"type":"comment","url":null},{"author":"bhouston","children":[],"created_at":"2026-10-30T18:11:27.000Z","created_at_i":1793383887,"id":50307920,"options":[],"parent_id":50304326,"points":null,"story_id":50300683,"text":"I realized this earlier this year and dumped Cursor for just vscode along with 20x subs to Claude and OpenAI. Much cheaper and nothing of value was lost.","title":null,"type":"comment","url":null},{"author":"satellites","children":[{"author":"lp92","children":[],"created_at":"2026-10-31T02:50:27.000Z","created_at_i":1793415027,"id":50312774,"options":[],"parent_id":50308136,"points":null,"story_id":50300683,"text":"Yeah, kind of eye raising if people are still using Cursor now days.","title":null,"type":"comment","url":null},{"author":"arendtio","children":[],"created_at":"2026-10-31T18:08:42.000Z","created_at_i":1793470122,"id":50318445,"options":[],"parent_id":50308136,"points":null,"story_id":50300683,"text":"I used Cursor first, tried Claude Code, but went back to Cursor. In general, I am pretty happy with Cursor, but given Elon's talent for ruining things, I am currently preparing for an exit.
It is not because I don't like Cursor or have found something better, just because I see things like no OpenAI models going forward, a push for Grok, and the stuff that xAI did in the past.
Before Cursor, I used vim + tmux.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:25:13.000Z","created_at_i":1793384713,"id":50308136,"options":[],"parent_id":50304326,"points":null,"story_id":50300683,"text":"Cursor was the first AI coding tool I used that had a "wow" factor and got me to switch over from typing out most of my code to having AI write most of it. But then when I used Claude Code for the first time, I never went back to Cursor.
I can see the value in a world where you still want to be a bit more hands-on with your code, but that didn't feel worth paying for anymore. Now if I want to be hands-on I actually prefer a minimalist editor with no AI features at all, while agents run in my terminal.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:20:49.000Z","created_at_i":1793370049,"id":50304326,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"If this isn't a damning indictment of Cursor, I don't know what is. Perhaps it will be the death knell.
What value is this VS fork actually adding given today's advanced harnesses? Surely whatever benefits it offers are not worth the risks going forward.","title":null,"type":"comment","url":null},{"author":"elevation","children":[],"created_at":"2026-10-30T14:23:47.000Z","created_at_i":1793370227,"id":50304369,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"> We\u2019re working with Cursor on this incident
Could be better to say "we're working with the Cursor team on this incident". Not your intent, but I initially understood that the Claude team was using Cursor-the-product (instead of Claude-the-product) to resolve the backdoors.","title":null,"type":"comment","url":null},{"author":"ipsento606","children":[{"author":"wky","children":[{"author":"gamer191","children":[],"created_at":"2026-10-30T16:41:59.000Z","created_at_i":1793378519,"id":50306465,"options":[],"parent_id":50304559,"points":null,"story_id":50300683,"text":"It wasn't on OpenVSX according to https://news.ycombinator.com/item?id=50305148","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:36:58.000Z","created_at_i":1793371018,"id":50304559,"options":[],"parent_id":50304406,"points":null,"story_id":50300683,"text":"Even more confusing is apparently Cursor Marketplace is OpenVSX + their own proxy to add extensions on top[0], so there are at least two possible cases:
1. The compromised version was present on OpenVSX itself, and Cursor Marketplace proxied to it
2. The compromised version was on Cursor's proxy, not OpenVSX itself
[0] https://cursor.com/help/customization/extensions","title":null,"type":"comment","url":null},{"author":"ddworken","children":[{"author":"consumer451","children":[{"author":"aaronrobinson","children":[{"author":"slim","children":[],"created_at":"2026-10-31T09:39:36.000Z","created_at_i":1793439576,"id":50314461,"options":[],"parent_id":50314244,"points":null,"story_id":50300683,"text":"He's implying that twitter will shadow ban this info to let anthropic reputation be damaged for a few more days","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T08:43:59.000Z","created_at_i":1793436239,"id":50314244,"options":[],"parent_id":50305875,"points":null,"story_id":50300683,"text":"Huh?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T16:03:57.000Z","created_at_i":1793376237,"id":50305875,"options":[],"parent_id":50304585,"points":null,"story_id":50300683,"text":"I am curious to see how difficult it will be to get this message across on Twitter. $44B seems like a bargain at this point.","title":null,"type":"comment","url":null},{"author":"bostik","children":[{"author":"nitrix","children":[{"author":"giancarlostoro","children":[],"created_at":"2026-10-30T23:23:39.000Z","created_at_i":1793402619,"id":50311448,"options":[],"parent_id":50310064,"points":null,"story_id":50300683,"text":"Yeah, but every now and then someone working for Anthropic tweets something, everyone quotes it as gospel, but there's no official statement anywhere on their website. They have the worst communication ever, it's one of the things I like the least about Anthropic.","title":null,"type":"comment","url":null},{"author":"stingraycharles","children":[],"created_at":"2026-10-30T23:43:38.000Z","created_at_i":1793403818,"id":50311624,"options":[],"parent_id":50310064,"points":null,"story_id":50300683,"text":"It\u2019s strictly speaking not their responsibility, but it is something that they should do if they want to help their customers.
In general, they need to make a really big post somewhere that\u2019s not a HN comment that this was in fact a compromise of the Cursor marketplace, not an employee\u2019s machine, because they\u2019re getting a lot of (unjustified) bad PR.","title":null,"type":"comment","url":null},{"author":"dboreham","children":[{"author":"fn-mote","children":[],"created_at":"2026-10-31T00:33:17.000Z","created_at_i":1793406797,"id":50312012,"options":[],"parent_id":50311912,"points":null,"story_id":50300683,"text":"They didn't because they were benefitting from the situation. (Users got to use their preferred tooling.) Until they weren't. That makes it more their problem, in my mind.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T00:19:14.000Z","created_at_i":1793405954,"id":50311912,"options":[],"parent_id":50310064,"points":null,"story_id":50300683,"text":"No but their no doubt highly paid lawyers should have sought relief from their trademark being infringed, and demanded the extension was pulled long ago.","title":null,"type":"comment","url":null},{"author":"bg24","children":[],"created_at":"2026-10-31T00:26:05.000Z","created_at_i":1793406365,"id":50311962,"options":[],"parent_id":50310064,"points":null,"story_id":50300683,"text":"You run a business and have millions of high paying customers. Someone happens to use your brand to market things and create harm for the society. Legally, you may be clean. But, your first line of defense is not "it is not my problem".","title":null,"type":"comment","url":null},{"author":"bagels","children":[],"created_at":"2026-10-31T09:38:32.000Z","created_at_i":1793439512,"id":50314454,"options":[],"parent_id":50310064,"points":null,"story_id":50300683,"text":"They're not obligated to. I'm not obligated to be a customer.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T20:59:25.000Z","created_at_i":1793393965,"id":50310064,"options":[],"parent_id":50308566,"points":null,"story_id":50300683,"text":"You're confused. It's not Anthropic's responsibility to monitor and fix everything that's said correctly or incorrectly about them. They're doing excellent given what they're capable to do in this situation.","title":null,"type":"comment","url":null},{"author":"troupo","children":[],"created_at":"2026-10-30T23:07:43.000Z","created_at_i":1793401663,"id":50311306,"options":[],"parent_id":50308566,"points":null,"story_id":50300683,"text":"> But Anthropic (and everyone around this debacle) in general: please put some real effort behind planned crisis communications. The reporting on this has been atrocious and the comms coming from Anthropic have not really helped.
Anthropic is incapable of communicating. They rely on random employees in random threads on random social media to do some kind of PR and posts. Regardless of the issue. Or even non-issues but features.","title":null,"type":"comment","url":null},{"author":"dannyw","children":[{"author":"stefangordon","children":[],"created_at":"2026-10-31T12:09:17.000Z","created_at_i":1793448557,"id":50315373,"options":[],"parent_id":50314539,"points":null,"story_id":50300683,"text":"They absolutely control it. An anthropic employee has been pushing those builds since the beginning.
This time they say they didn\u2019t do it. That might be true or maybe that employees credential was compromised. We don\u2019t actually have facts yet.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T09:58:24.000Z","created_at_i":1793440704,"id":50314539,"options":[],"parent_id":50308566,"points":null,"story_id":50300683,"text":"Anthropic needs to issue a cease and desist to Cursor for claiming official \u201cby Anthropic\u201d extensions they don\u2019t make or control.
They would have done this in a heartbeat to anyone that they\u2019re not reliant on for compute.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:56:53.000Z","created_at_i":1793386613,"id":50308566,"options":[],"parent_id":50304585,"points":null,"story_id":50300683,"text":"This is not directed at you personally but Anthropic (and everyone around this debacle) in general: please put some real effort behind planned crisis communications. The reporting on this has been atrocious and the comms coming from Anthropic have not really helped.
FWIW: the decision to publish an overriding version bump across all lanes was the correct one. It simplifies comms and helps to answer the first question every affected party has: "but what does this mean to ME?" - much easier to deal with the flood when you can start by sending back "are you running, or have you ever installed version Y?"
Time for technically accurate nuance comes shortly after, and in this case it has been lacking. Yes, you are dealing with confusing mix of various extension marketplaces. Explaining that to a questioning audience who do not have the necessary background information is non-trivial. Kevin's blog is pretty well known, but in this case the real updates are only coming in via a separate Mastodon thread (itself polluted by uninformed commenters) so the real, tangible and understandable details have still been missing.
Claude and its surrounding ecosystem are a huge, high-value supply chain compromise target. Cursor's extension being compromised is not your fault but it is still your problem.
Disclosure: done enough security incident comms in high-stakes environments with extremely demanding clients, operating under various regulations.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:38:28.000Z","created_at_i":1793371108,"id":50304585,"options":[],"parent_id":50304406,"points":null,"story_id":50300683,"text":"Dworken from Anthropic here, that is correct: This only impacted the extension as it was hosted on the Cursor marketplace. It did not impact the official VS Code extension marketplace or OpenVSX. Users of Claude Code on VS Code are not impacted by this issue.","title":null,"type":"comment","url":null},{"author":"ruined","children":[],"created_at":"2026-10-30T16:12:07.000Z","created_at_i":1793376727,"id":50305997,"options":[],"parent_id":50304406,"points":null,"story_id":50300683,"text":"there is NO LEGIT v2.1.313
here is the ddworken comment confirming https://news.ycombinator.com/item?id=50300683#50305148","title":null,"type":"comment","url":null},{"author":"sarjann","children":[{"author":"chrisweekly","children":[],"created_at":"2026-10-30T19:40:44.000Z","created_at_i":1793389244,"id":50309154,"options":[],"parent_id":50308979,"points":null,"story_id":50300683,"text":"There's been too much guessing already. Anthropic employees answered in this thread almost 4h before your response.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T19:26:18.000Z","created_at_i":1793388378,"id":50308979,"options":[],"parent_id":50304406,"points":null,"story_id":50300683,"text":"My guess is someone published an extension on vscode/cursor claiming to be Anthropic when it wasn't. Kind of like me publishing an app called Youtube on the app store, being accepted by Apple and having people download my malicious app called Youtube.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:26:32.000Z","created_at_i":1793370392,"id":50304406,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"The situation is confusing, so can I please confirm the following:
* "Cursor Editor" is a fork of VS Code
* The "Claude Code for VS Code" extension, v2.1.313, was compromised specifically on the Cursor Editor extension marketplace / distribution system
* The "Claude Code for VS Code" extension for regular VS Code on the official VS Code extension marketplace was not affected
Followup question: was a v2.1.313 also published on the official VS Code marketplace? If so, your statement is that that version was not compromised?","title":null,"type":"comment","url":null},{"author":"qwrkll","children":[{"author":"perching_aix","children":[],"created_at":"2026-10-30T14:47:53.000Z","created_at_i":1793371673,"id":50304744,"options":[],"parent_id":50304716,"points":null,"story_id":50300683,"text":"I'm guessing it was the easiest quick workaround available, but obv wait for official confirmation.
Reads like Cursor's extension marketplace got compromised, hence how the OpenVSX and MS marketplaces can be unaffected.","title":null,"type":"comment","url":null},{"author":"Handy-Man","children":[],"created_at":"2026-10-30T14:49:33.000Z","created_at_i":1793371773,"id":50304770,"options":[],"parent_id":50304716,"points":null,"story_id":50300683,"text":"313 was never released lol https://github.com/anthropics/claude-code/releases","title":null,"type":"comment","url":null},{"author":"ddworken","children":[],"created_at":"2026-10-30T14:50:52.000Z","created_at_i":1793371852,"id":50304793,"options":[],"parent_id":50304716,"points":null,"story_id":50300683,"text":"Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:46:12.000Z","created_at_i":1793371572,"id":50304716,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Why was version 2.1.313 silently deleted from OpenVSX, Visual Studio Marketplace and Cursor then?
https://doublepulsar.com/anthropic-hacked-to-deliver-remote-...","title":null,"type":"comment","url":null},{"author":"skinfaxi","children":[{"author":"ddworken","children":[{"author":"skinfaxi","children":[],"created_at":"2026-10-30T18:45:33.000Z","created_at_i":1793385933,"id":50308404,"options":[],"parent_id":50305148,"points":null,"story_id":50300683,"text":"Thank you for the clarification and my apologies for misspeaking, as the version indeed does not appear to have been yanked but entirely absent.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:18:24.000Z","created_at_i":1793373504,"id":50305148,"options":[],"parent_id":50304920,"points":null,"story_id":50300683,"text":"Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:03:40.000Z","created_at_i":1793372620,"id":50304920,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Why was the npm version 2.1.313 yanked?
https://www.npmjs.com/package/@anthropic-ai/claude-code?acti...","title":null,"type":"comment","url":null},{"author":"officeplant","children":[],"created_at":"2026-10-30T15:11:49.000Z","created_at_i":1793373109,"id":50305047,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"smooth sloperators, smooooooooth sloperattorrrrrssss","title":null,"type":"comment","url":null},{"author":"jitbit","children":[{"author":"chunky1994","children":[{"author":"jitbit","children":[{"author":"drdrey","children":[],"created_at":"2026-10-30T23:31:22.000Z","created_at_i":1793403082,"id":50311511,"options":[],"parent_id":50308466,"points":null,"story_id":50300683,"text":"well maybe they did reduce supply chain risk, but still need to reduce it some more","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:50:00.000Z","created_at_i":1793386200,"id":50308466,"options":[],"parent_id":50306056,"points":null,"story_id":50300683,"text":"Ironically, that page has a paragraph "How Cursor reduces supply-chain risk:"
Which is exactly the opposite of what happened today.","title":null,"type":"comment","url":null},{"author":"bagacrap","children":[],"created_at":"2026-10-30T23:56:24.000Z","created_at_i":1793404584,"id":50311719,"options":[],"parent_id":50306056,"points":null,"story_id":50300683,"text":"> Team admins can defer extension installs and updates until a marketplace version has been published for a minimum number of hours.
I think everyone is going to be setting this to 168 after today.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T16:15:35.000Z","created_at_i":1793376935,"id":50306056,"options":[],"parent_id":50305798,"points":null,"story_id":50300683,"text":"Apparently it is public: https://cursor.com/help/customization/extensions
They use a proxy in front of OpenVSX\u2026purportedly for better security, the irony writes itself.","title":null,"type":"comment","url":null},{"author":"Lazare","children":[],"created_at":"2026-10-30T19:58:14.000Z","created_at_i":1793390294,"id":50309347,"options":[],"parent_id":50305798,"points":null,"story_id":50300683,"text":"Yes. Cursor marketplace is a mirror of Open VSX except they inject some plugins that are not in Open VSX for some reason. This works because Open VSX has basically no security. Which was already an issue.","title":null,"type":"comment","url":null},{"author":"olejorgenb","children":[],"created_at":"2026-10-31T10:38:11.000Z","created_at_i":1793443091,"id":50314742,"options":[],"parent_id":50305798,"points":null,"story_id":50300683,"text":"Yeah, their blog post is not very transparent at what happened here. Does not instill trust.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T15:58:43.000Z","created_at_i":1793375923,"id":50305798,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Ok, so... Summing this up
- Cursor (obviously) is not using MSFT vscode extensions library\n- Cursor (apparently) is not using Open-VSX either!\n- Cursor uses it's own "Cursor's marketplace" which is not public, no one knows what it is exactly, and looks like it is proxying open-vsx marketplace (?) \n- THAT "Cursor's markeplace" is what was compromised today.
So. I would really really love someone from Cusro's team to step in and explain WTF just happened! (pardong the language)","title":null,"type":"comment","url":null},{"author":"nailer","children":[],"created_at":"2026-10-30T18:21:26.000Z","created_at_i":1793384486,"id":50308079,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"> The versions on our official channels are not affected and this only impacts Cursor users.
Is Cursor not an official channel for Claude?","title":null,"type":"comment","url":null},{"author":"saidnooneever","children":[{"author":"john_strinlai","children":[{"author":"jaykru","children":[{"author":"saidnooneever","children":[{"author":"snayan","children":[],"created_at":"2026-10-31T09:21:17.000Z","created_at_i":1793438477,"id":50314384,"options":[],"parent_id":50314121,"points":null,"story_id":50300683,"text":"Do you have any visibility into why or how only is viewed negatively by some populations? I am still struggling to connect that dot, and I am a native english speaker. But I suspect that may be part of the problem? Are their some languages where the translation of only isn't parsed quite the same or something?","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T08:11:17.000Z","created_at_i":1793434277,"id":50314121,"options":[],"parent_id":50308278,"points":null,"story_id":50300683,"text":"people have varying degrees of sensitivity and also different defaults when it comes to interpreting phrasing depending on their native language, cultural expressions, current emotional state and more.
its a bad thing to assume that everyone is the same here and have some default reactions.
these are people who in name of company are responding to customer concerns, unlike us who are simply commenting on stuff. its a different context to communicate from.
what do you think will be nhe result if they word things clumsily, people get angry, and then stop their subscriptions. Its not a handy thing to be doing. Big tech can be harsh, ive seen people sacked for less.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:35:33.000Z","created_at_i":1793385333,"id":50308278,"options":[],"parent_id":50308265,"points":null,"story_id":50300683,"text":"I think the concern is that it could be seen as minimizing the harm done to those affected, but I personally think this is kind of a hypersensitive overcorrection :P","title":null,"type":"comment","url":null},{"author":"saidnooneever","children":[],"created_at":"2026-10-31T08:07:46.000Z","created_at_i":1793434066,"id":50314109,"options":[],"parent_id":50308265,"points":null,"story_id":50300683,"text":"hey, personally i dont mind either, perhaps its because different words are used to frame things differently in different languages. A lot of people here type english but aren't.
I just said this as some unsolicited advice since out of experience i know it makes.\n a big difference to choose the right phrasing when speaking to people from around the globe.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:33:49.000Z","created_at_i":1793385229,"id":50308265,"options":[],"parent_id":50308120,"points":null,"story_id":50300683,"text":">I'd suggest stop to use the word 'only' as it can be perceive wrongly here.
ive been sitting here for a few minutes trying to figure out what the 'wrong' perception here is.
why do people cry if you say "only"?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T18:24:06.000Z","created_at_i":1793384646,"id":50308120,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"I'd suggest stop to use the word 'only' as it can be perceive wrongly here.
you can simply say Cursor users were affected. or exclusively.
just a tip from someone who worked tech support in cyber a long time. choice of words can really help change sentiments in these situations.
'only server xyz was affected' vs. 'server xyz was affected' or 'incident was isolated to server xyz' was often difference between shouting and crying customers or people understanding what was really meant.","title":null,"type":"comment","url":null},{"author":"f0e4c2f7","children":[],"created_at":"2026-10-30T20:14:09.000Z","created_at_i":1793391249,"id":50309523,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"All these security issues have made me want to build more of my own slimmed down tools. It would be great if there were better ways to use claude code with my own minimal harness and still have access to the pro plan.","title":null,"type":"comment","url":null},{"author":"tzone","children":[{"author":"IshKebab","children":[{"author":"tehlike","children":[{"author":"baxtr","children":[],"created_at":"2026-10-30T20:57:53.000Z","created_at_i":1793393873,"id":50310050,"options":[],"parent_id":50309879,"points":null,"story_id":50300683,"text":"HN has a dedicated upvote functionality.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T20:43:01.000Z","created_at_i":1793392981,"id":50309879,"options":[],"parent_id":50309863,"points":null,"story_id":50300683,"text":"+1.","title":null,"type":"comment","url":null},{"author":"theteapot","children":[],"created_at":"2026-10-30T20:59:33.000Z","created_at_i":1793393973,"id":50310067,"options":[],"parent_id":50309863,"points":null,"story_id":50300683,"text":"I think he's saying (erroneously) Anthropic owns Cursor. Reading this claude.com page [1] hawking Cursor you could be forgiven for forming that impression.
[1]: https://claude.com/marketplace/agents-products/cursor","title":null,"type":"comment","url":null},{"author":"ethanzh","children":[{"author":"junofan","children":[{"author":"weego","children":[{"author":"daynthelife","children":[],"created_at":"2026-10-30T22:58:55.000Z","created_at_i":1793401135,"id":50311201,"options":[],"parent_id":50310587,"points":null,"story_id":50300683,"text":"Legal responsibility, no. But apple's reputation would nevertheless be on the line. Is this situation I would expect Apple to pursue legal action against Costco for reputational damage, as I would Anthropic Cursor.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:47:40.000Z","created_at_i":1793396860,"id":50310587,"options":[],"parent_id":50310512,"points":null,"story_id":50300683,"text":"It's literally not like that at all.
If Costco made iPhones under license from Apple outside of the Apple supply chain and they all exploded, while the Apple name is involved they have no direct liability or responsibility.","title":null,"type":"comment","url":null},{"author":"true_religion","children":[{"author":"plaguuuuuu","children":[{"author":"fn-mote","children":[],"created_at":"2026-10-30T23:59:48.000Z","created_at_i":1793404788,"id":50311752,"options":[],"parent_id":50310754,"points":null,"story_id":50300683,"text":"If there are no seals at all then it\u2019s hard to argue this is the correct analogy.
And there was no interception. At the very strongest, the bad guys convinced Cisco to ship the stuff, and Cisco is saying it\u2019s not their responsibility.
They definitely shipped something they didn\u2019t build or check.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T22:05:34.000Z","created_at_i":1793397934,"id":50310754,"options":[],"parent_id":50310602,"points":null,"story_id":50300683,"text":"It's a lot more like a bunch of people bought Cisco networking equipment and then the NSA secretly intercepted shipments, implanted surveillance backdoors, then resealed the boxes and sent them on to unsuspecting overseas targets.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:49:11.000Z","created_at_i":1793396951,"id":50310602,"options":[],"parent_id":50310512,"points":null,"story_id":50300683,"text":"No, it's like 5,000 people bought something that Costco called the iPhone but really was EvilPhone Max+ by EvilCorp. Costco should be on the hook for accepting the phones without properly checking they weren't bombs in disguise.
Apple would be 100% right to say "they're not our phone, we didn't make them, the branding was a lie."
Of course if Cursor actually has a direct connection with Anthropic, and Anthropic lost control of their keys... it's a different story and their employee is just obfuscating up there.","title":null,"type":"comment","url":null},{"author":"kji","children":[{"author":"quietbritishjim","children":[],"created_at":"2026-10-30T23:39:41.000Z","created_at_i":1793403581,"id":50311592,"options":[],"parent_id":50310606,"points":null,"story_id":50300683,"text":"In this situation, Cursor did not make any reasonable attempts to check this extension really was from anthropic.
So for the analogy, it really is like Costco didn't make any attempt to check they were buying actual iPhones.","title":null,"type":"comment","url":null},{"author":"yardstick","children":[],"created_at":"2026-10-31T01:01:06.000Z","created_at_i":1793408466,"id":50312188,"options":[],"parent_id":50310606,"points":null,"story_id":50300683,"text":"A better analogy would be to say Anthropic must register their domain with every TLD available, to prevent someone cybersquatting it. I see Claude.org.nz is available.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:49:37.000Z","created_at_i":1793396977,"id":50310606,"options":[],"parent_id":50310512,"points":null,"story_id":50300683,"text":"This is misleading; a better analogy would be if someone swapped out all iPhones in the store with fake ones.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:39:44.000Z","created_at_i":1793396384,"id":50310512,"options":[],"parent_id":50310094,"points":null,"story_id":50300683,"text":"It\u2019s like if 5,000 people bought iPhones at Costco and they all exploded, and Apple says \u201cwell we didn\u2019t sell them.\u201d Sure, but maybe not the perfect thing to communicate immediately.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:02:08.000Z","created_at_i":1793394128,"id":50310094,"options":[],"parent_id":50309863,"points":null,"story_id":50300683,"text":"I don't think they're trying to spin this as Anthropic being compromised, but I do think they're correct in saying this is Anthropic's problem to deal with now, regardless of the fact that they're not responsible for the root cause.","title":null,"type":"comment","url":null},{"author":"abofh","children":[{"author":"NewsaHackO","children":[],"created_at":"2026-10-30T22:57:46.000Z","created_at_i":1793401066,"id":50311191,"options":[],"parent_id":50310240,"points":null,"story_id":50300683,"text":"This is wrong.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:15:50.000Z","created_at_i":1793394950,"id":50310240,"options":[],"parent_id":50309863,"points":null,"story_id":50300683,"text":"That is not what was written; what was described was anthropic losing control over their cursor account - perhaps a key compromise, developer laptop compromise, or a fault in cursor, but of the three, the language suggests the first two.","title":null,"type":"comment","url":null},{"author":"d0mine","children":[],"created_at":"2026-10-30T21:19:08.000Z","created_at_i":1793395148,"id":50310282,"options":[],"parent_id":50309863,"points":null,"story_id":50300683,"text":"If you decided to use an umbrella to protect something during a hurricane and umbrella breaks and your thing is ruined. Whose fault is that?
Distributing signed artifacts is a solved problem (until NP=P is cracked at least).","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T20:42:03.000Z","created_at_i":1793392923,"id":50309863,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"That's nonsense. If what felixrieseberg said is true this is very clearly a compromise of Cursor and not Anthropic. Trying to spin it as a compromise of Anthropic is absurd.","title":null,"type":"comment","url":null},{"author":"consumer451","children":[],"created_at":"2026-10-30T20:51:34.000Z","created_at_i":1793393494,"id":50309985,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"Are you claiming that the Cursor extension store - marketplace.cursorapi.com - does not add their own proxy to Open VSX?
One thing at a time. Please just answer this one question. I am just some dude, and I would love to chat about this.","title":null,"type":"comment","url":null},{"author":"AtNightWeCode","children":[{"author":"munk-a","children":[{"author":"no-name-here","children":[],"created_at":"2026-10-31T02:11:42.000Z","created_at_i":1793412702,"id":50312595,"options":[],"parent_id":50311155,"points":null,"story_id":50300683,"text":"> Anthropic really dropped the ball on signaling that this was an unofficial third party tool
Had the tool been up longer than the 11 hours the malware was live? If not, then why would Anthropic try to get it marked as unofficial, as opposed to take it down?
Or are you saying that every author and publisher should request Cursor to mark their extensions on the Cursor vsx pass-through as unofficial?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T22:54:31.000Z","created_at_i":1793400871,"id":50311155,"options":[],"parent_id":50310352,"points":null,"story_id":50300683,"text":"From the producer's side, sure, we[1]'re all pretty sympathetic to the fact that if you publish a library a bunch of random people will build bridging libraries for languages that you have no control over.
But from the consumer's side it is very much an expectation and if you find yourself in the situation above it's on you to make it very clear that such extensions and third party tools are unofficial.
In this particular case I think it's fair to say that Anthropic really dropped the ball on signaling that this was an unofficial third party tool.
1. We specifically being library and tool producers that are noticeably overrepresented on this forum.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T21:25:08.000Z","created_at_i":1793395508,"id":50310352,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"That is simply not how software works.","title":null,"type":"comment","url":null},{"author":"darkwi11ow","children":[],"created_at":"2026-10-30T21:46:58.000Z","created_at_i":1793396818,"id":50310578,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"The issue could be resolved by introducing some sort of signing for openvsx extension packages. Then regardless of from where one downloaded Claude, it can be always verified to be authentic or not. This technology exists for ages and prominently featured in all mainstream Linux distributions. Cursor, Anthropic and other openvsx users need to work with Eclipse Foundation to make this happen.","title":null,"type":"comment","url":null},{"author":"cmiles74","children":[{"author":"adriand","children":[{"author":"dboreham","children":[{"author":"no-name-here","children":[{"author":"bagels","children":[],"created_at":"2026-10-31T09:37:21.000Z","created_at_i":1793439441,"id":50314450,"options":[],"parent_id":50312570,"points":null,"story_id":50300683,"text":"It is an Anthropic problem. It's also a Cursor problem.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T02:06:26.000Z","created_at_i":1793412386,"id":50312570,"options":[],"parent_id":50311894,"points":null,"story_id":50300683,"text":"I think GP\u2019s objection to the claim that Cursor allowing non-Anthropic to do it for 11 hours was partly \u201can Anthropic problem.\u201d","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T00:17:21.000Z","created_at_i":1793405841,"id":50311894,"options":[],"parent_id":50311375,"points":null,"story_id":50300683,"text":"No, you misunderstand (not surprising since 99% of the coverage on this story is wrong). What happened is: someone published an extension called "Anthropic.claude-code". That someone was not Anthropic and never was Anthropic. They just used the string "Anthropic" in the name of their extension. The comment you are responding to is saying that Cursor (the organization that manages the extension marketplace) should have prohibited someone from using a popular AI lab's name in the title of their mystery meat extension. They're probably right about that.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T23:16:17.000Z","created_at_i":1793402177,"id":50311375,"options":[],"parent_id":50311162,"points":null,"story_id":50300683,"text":"> Cursor should not be shipping extensions that are branded Anthropic if Anthropic didn\u2019t create that extension.
Well, duh. From what I can tell, that\u2019s literally the hack. A bad actor shipped an extension on the Cursor marketplace that wasn\u2019t made by Anthropic.","title":null,"type":"comment","url":null},{"author":"cmiles74","children":[{"author":"telephone3","children":[],"created_at":"2026-10-31T04:53:10.000Z","created_at_i":1793422390,"id":50313311,"options":[],"parent_id":50312488,"points":null,"story_id":50300683,"text":"I mean the initial translation kind of works too.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T01:52:45.000Z","created_at_i":1793411565,"id":50312488,"options":[],"parent_id":50311162,"points":null,"story_id":50300683,"text":"I'm on my phone, "If that\u2019s hostile works.." should be "If that\u2019s how it works..."","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T22:55:04.000Z","created_at_i":1793400904,"id":50311162,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"Cursor should not be shipping extensions that are branded Anthropic if Anthropic didn\u2019t create that extension. If that\u2019s really what happened then that needs to change, ASAP. Now that it has happened, IMHO, it is partly an Anthropic problem: the malware has their branding and their name on it, I don\u2019t think they can just brush that off.
Does Cursor have some process that just scrapes Microsoft\u2019s extension catalog and lists them in their own? If that\u2019s hostile works then it\u2019s broken and needs to be fixed.","title":null,"type":"comment","url":null},{"author":"ghshephard","children":[{"author":"AtNightWeCode","children":[{"author":"Rohansi","children":[{"author":"yubblegum","children":[{"author":"Rohansi","children":[{"author":"yunnpp","children":[{"author":"Rohansi","children":[{"author":"dkersten","children":[],"created_at":"2026-10-31T09:03:06.000Z","created_at_i":1793437386,"id":50314310,"options":[],"parent_id":50313157,"points":null,"story_id":50300683,"text":"You could make it a requirement only for people who want to attribute \u201cmade by\u201d. If you publish a no name extension, you could skip it.","title":null,"type":"comment","url":null},{"author":"yunnpp","children":[{"author":"Rohansi","children":[{"author":"yunnpp","children":[{"author":"Rohansi","children":[],"created_at":"2026-11-01T11:10:51.000Z","created_at_i":1793531451,"id":50324501,"options":[],"parent_id":50318436,"points":null,"story_id":50300683,"text":"A big danger warning before installing extensions is a great way to kill your FOSS extension crowd off. Verifying ownership of a domain doesn't even guarantee that anything about the extension is trustworthy. People get phished all the time and skip through warnings.
Scanning is a curious one. It's not always obvious because developer tools have legitimate reasons to do a lot of these things. LLMs are better at understanding what it's actually doing now though so that might have worked. But who knows, people have snuck in backdoors into many things before.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T18:07:40.000Z","created_at_i":1793470060,"id":50318436,"options":[],"parent_id":50317812,"points":null,"story_id":50300683,"text":"Nothing, but that extension would be flagged as "unknown" or "third-party" source or something and you'd get a big warning before proceeding to install it.
Also, a basic scan of the package would have flagged an ssh backdoor, no? It didn't seem to me like its obfuscation was very sophisticated.","title":null,"type":"comment","url":null},{"author":"havnagiggle","children":[],"created_at":"2026-11-01T14:13:12.000Z","created_at_i":1793542392,"id":50325894,"options":[],"parent_id":50317812,"points":null,"story_id":50300683,"text":"Literally "Made by <verified domain name>" would go a long way. Cursor is just making poor technical decisions. But then I'm sure we'd have a news story about homoglyph attacks on Cursor.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T16:54:03.000Z","created_at_i":1793465643,"id":50317812,"options":[],"parent_id":50317632,"points":null,"story_id":50300683,"text":"Then you would have the same problem. Anthropic has no presence on the Cursor Marketplace, so what is stopping someone from claiming the name and just not associating a domain name?","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T16:34:38.000Z","created_at_i":1793464478,"id":50317632,"options":[],"parent_id":50313157,"points":null,"story_id":50300683,"text":"You don't need to force everyone, both an coexist in this context. I do believe a company with nearly a trillion dollars of planned expenditure can afford to buy a domain and renew it prior to expiration.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T04:15:03.000Z","created_at_i":1793420103,"id":50313157,"options":[],"parent_id":50312613,"points":null,"story_id":50300683,"text":"And force everyone who wants to publish an extension to buy and manage a domain name? What if it expires? You're just replacing one set of problems with another.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T02:14:32.000Z","created_at_i":1793412872,"id":50312613,"options":[],"parent_id":50312207,"points":null,"story_id":50300683,"text":"This is a solved problem, just look at how EFF's certbot works. You cannot just claim that you are porn.com unless you put a payload there that matches what the bot expects.","title":null,"type":"comment","url":null},{"author":"skydhash","children":[],"created_at":"2026-10-31T02:30:26.000Z","created_at_i":1793413826,"id":50312683,"options":[],"parent_id":50312207,"points":null,"story_id":50300683,"text":"> Code signing, yes, but not for organization verification
They don\u2019t do organization verification, but they do verify where code comes from. You may be sure that packages are built by alpine, which made sure that the dist files comes from the sources that the maintainers added, and the latter ensure that the sources are correct. In truth, it\u2019s a very small circle of trust.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T01:04:45.000Z","created_at_i":1793408685,"id":50312207,"options":[],"parent_id":50311999,"points":null,"story_id":50300683,"text":"I don't think even VSCode does this. Probably not even any package managers I know of? Code signing, yes, but not for organization verification? It's pretty much like a username - anyone can claim it if it is unclaimed?
edit: VSCode has a verified marker for publishers but I don't know how that works or if Cursor does the same.","title":null,"type":"comment","url":null},{"author":"still_grokking","children":[{"author":"rixed","children":[{"author":"still_grokking","children":[],"created_at":"2026-10-31T08:29:57.000Z","created_at_i":1793435397,"id":50314194,"options":[],"parent_id":50313676,"points":null,"story_id":50300683,"text":"Well, if something than it's "anti-protectionism".
This is going to cause some major argument between the EU and the US, maybe even a trade war. Trouble is already underway:
https://www.reuters.com/legal/government/us-lawmakers-urge-t...
Despite that I also think that this is the right and long overdue move on the EU side. We need to break the basic pattern that nobody cares as long as the responsible effectively never get the bill when they mess up.
Software is "Unsafe at Any Speed" [ https://en.wikipedia.org/wiki/Unsafe_at_Any_Speed ] to bring a striking analogy \u2014 even we have since about 60 years the tech to build software which provably (in the mathematical sense) matches its specification. Still what you have on the market is utter garbage, and instead of getting better it gets currently actually worse with lowering the garbage quality level even more with "AI" slop. That EU legislation could become the escape hatch; that's why I'm looking forward.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T06:18:57.000Z","created_at_i":1793427537,"id":50313676,"options":[],"parent_id":50313007,"points":null,"story_id":50300683,"text":"That, and NIS2. Looks like a good trend, hopefully it's not just protectionism.","title":null,"type":"comment","url":null},{"author":"duskdozer","children":[{"author":"still_grokking","children":[],"created_at":"2026-10-31T12:47:43.000Z","created_at_i":1793450863,"id":50315698,"options":[],"parent_id":50314223,"points":null,"story_id":50300683,"text":"It's the biggest fundamental change which ever happened in how software is treated legally. This is a revolution!
Under the new legislation software products become regular products; there is no liability exception any more.
If you commercially distribute defective products to end user you're in general liable for the damages these defective products cause. This now includes pure software just as any other (physical) product on the market.
If you don't know how product liability generally works in the EU, and what this means for software see here:
https://cms.law/en/int/publication/the-new-eu-product-liabil...","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T08:38:39.000Z","created_at_i":1793435919,"id":50314223,"options":[],"parent_id":50313007,"points":null,"story_id":50300683,"text":"I'm having trouble understanding what effects that directive could have. Liability under what circumstances and to what degree?","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T03:42:07.000Z","created_at_i":1793418127,"id":50313007,"options":[],"parent_id":50311999,"points":null,"story_id":50300683,"text":"> Really, this profession has become a complete clown show.
Always has been because there is so far zero liability for anything someone programs and distributes commercially. That's the single root cause. If not that software wouldn't be in general such major shit show. What we have is the result of being allowed to throw out even the most toxic shit out without any consequences if it causes damage, no mater how large the damage is. Software companies caused so far over the decades likely hundreds of billions, or even a few trillion damages in sum, yet nobody responsible ever got the bill. It's wild west\u2014since now over 60 years. This has to stop finally!
Let's see where things will move as soon as we have regular product liability for software:
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=legissum...
Just a few days left! Looking forward.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T00:31:49.000Z","created_at_i":1793406709,"id":50311999,"options":[],"parent_id":50311743,"points":null,"story_id":50300683,"text":"Vendor A publishes a public key on their site for authenticating any signature. There is an entire subset of cryptography dedicated to addressing these needs. This is just yet another software player, Cursor, taking the absolutely easy no effort path because otherwise they would be, I don't know, "losers". I mean only losers would setup a basic authenticated provinance for bits of code they are pushing to the world to be executed by all and sundry. Really, this profession has become a complete clown show.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T23:59:06.000Z","created_at_i":1793404746,"id":50311743,"options":[],"parent_id":50311556,"points":null,"story_id":50300683,"text":"Isn't the Cursor Marketplace separate from VSCode's? Maybe it's as simple as someone impersonating Anthropic because they never registered there? Code signing alone wouldn't help in cases like that.","title":null,"type":"comment","url":null},{"author":"LooseMarmoset","children":[],"created_at":"2026-10-31T00:33:52.000Z","created_at_i":1793406832,"id":50312023,"options":[],"parent_id":50311556,"points":null,"story_id":50300683,"text":"i work for a large company that\u2019s trying to curate vs code extensions, and this doesn\u2019t make it easy.
we automatically block extensions and require that extensions must be approved, but this is a tedious process.","title":null,"type":"comment","url":null},{"author":"wombatpm","children":[{"author":"luipugs","children":[],"created_at":"2026-10-31T04:37:34.000Z","created_at_i":1793421454,"id":50313254,"options":[],"parent_id":50313224,"points":null,"story_id":50300683,"text":"No, that is already solved by gpg.
Stop trying to make blockchain happen, it's not going to happen.","title":null,"type":"comment","url":null},{"author":"chaostheory","children":[],"created_at":"2026-10-31T05:06:11.000Z","created_at_i":1793423171,"id":50313372,"options":[],"parent_id":50313224,"points":null,"story_id":50300683,"text":"Using it for voting would probably be useful for the blockchain, but then the downside would be the potential loss of privacy.","title":null,"type":"comment","url":null}],"created_at":"2026-10-31T04:30:17.000Z","created_at_i":1793421017,"id":50313224,"options":[],"parent_id":50311556,"points":null,"story_id":50300683,"text":"Is there finally a use for blockchain?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T23:36:08.000Z","created_at_i":1793403368,"id":50311556,"options":[],"parent_id":50311455,"points":null,"story_id":50300683,"text":"The core problem is that VScode extensions does not need to be signed at all. Mind boggling stupid design decision.","title":null,"type":"comment","url":null},{"author":"jimmby654","children":[],"created_at":"2026-10-31T01:50:21.000Z","created_at_i":1793411421,"id":50312478,"options":[],"parent_id":50311455,"points":null,"story_id":50300683,"text":"You want an AI company to care about IP? And you aren't being sarcastic?","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T23:24:52.000Z","created_at_i":1793402692,"id":50311455,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"I was working on the clearly mistaken impression that "Made by Anthropic" in the cursor store meant that the artifact had been signed by Anthropic. If that is not the case, then two party's need to get their act together:
- Cursor needs to add signing if they want to claim something was "made" by another party.\n\n - Anthropic needs to stamp out any provider from using said, "Made by Anthropic" until they start adding signing to their process. Trademark law is useful here.\n\nFor example - what guarantee do I have with something like: \n" This publisher has verified ownership of cursor.com" - when I'm looking at the WSL extension. Are there any guarantees it's not been replaced with some other extension?","title":null,"type":"comment","url":null},{"author":"bg24","children":[],"created_at":"2026-10-31T00:21:36.000Z","created_at_i":1793406096,"id":50311926,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"Leading companies need to be proactive in reducing these surface areas. For example, if anyone can submit an agent skill, plugin, or MCP server with Anthropic or OpenAI's name into a marketplace, it is an attack vector.","title":null,"type":"comment","url":null},{"author":"dannyw","children":[],"created_at":"2026-10-31T09:41:36.000Z","created_at_i":1793439696,"id":50314473,"options":[],"parent_id":50309617,"points":null,"story_id":50300683,"text":"Anthropic is desperately dependent on SpaceXSI's compute (which either party can cancel without cause, on short notice), they can't really tell SpaceXSI to do anything without ruining their IPO; or more Claude outages leading to users flocking to OpenAI, etc.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T20:21:31.000Z","created_at_i":1793391691,"id":50309617,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"You can say that this isn't compromise of Anthropic, but it sort of is in the setup. Cursor Claude extension is marked as something made by Anthropic, so default assumption is that only people who can release that new extension would be a team at Anthropic.
Since that is clearly not the case, that is just as much Anthropic's problem as it is Cursor's problem. There either needs to be a technical change so that extensions are signed with keys that Anthropic controls, or you should take the branding off from the Cursor extensions.","title":null,"type":"comment","url":null},{"author":"still_grokking","children":[],"created_at":"2026-10-31T03:21:34.000Z","created_at_i":1793416894,"id":50312920,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Why such stuff isn't signed, like packages in every serious Linux distribution since decades?","title":null,"type":"comment","url":null},{"author":"Rapzid","children":[],"created_at":"2026-10-31T05:08:58.000Z","created_at_i":1793423338,"id":50313387,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Nobody seems to be taking responsibility for the alluded-to credential leak. No ownership taken, and no explanation of how the leak occurred or how it will be prevented in the future.
If y'alls systems were not compromised then it was Cursors?","title":null,"type":"comment","url":null},{"author":"razster","children":[],"created_at":"2026-10-31T16:33:42.000Z","created_at_i":1793464422,"id":50317627,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"Lot worse than that, they're finding more exploits as of today. Good luck.","title":null,"type":"comment","url":null},{"author":"zapataband1","children":[],"created_at":"2026-11-01T21:05:12.000Z","created_at_i":1793567112,"id":50329869,"options":[],"parent_id":50304129,"points":null,"story_id":50300683,"text":"But if any of your employees had used this cursor extension then their laptop would be compromised.","title":null,"type":"comment","url":null}],"created_at":"2026-10-30T14:08:52.000Z","created_at_i":1793369332,"id":50304129,"options":[],"parent_id":50300683,"points":null,"story_id":50300683,"text":"Felix from Anthropic here.
We\u2019re working with Cursor on this incident, but it wasn\u2019t a compromise of Anthropic\u2019s systems or employee laptops. A malicious actor used access to Cursor\u2019s marketplace to publish a tampered copy of the Claude Code extension, which we didn\u2019t build or publish. The versions on our official channels are not affected and this only impacts Cursor users.","title":null,"type":"comment","url":null}