an anthropic laptop? why are you sketpical?
In fairness, that is very surprising.
Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.
IIUC Anthropic does not publish extensions for Cursor. It’s basically, official Claude code extension “clone” not by Anthropic.
Ai summary in better words: The Recent Malicious Build (v2.1.313): A tampered version of this extension (version 2.1.313) was uploaded to the Cursor extension marketplace. This specific, malicious build was not developed or authorized by Anthropic. Attackers effectively hijacked or spoofed the extension's legitimate identity within the Cursor/Open-VSX system to bundle an unauthorized SSH backdoor into the real Anthropic code.
That likely seems incorrect as I see Claude Code listed on open-vsx with:
* An "Anthropic" "Verified publisher" badge
* igorkofman listed who seems to be an Anthropic employee
* 63M downloads
* Reviews going back >1 year
So that’s how these things can go, the employee’s machine may have been infected which was then used to inject this.
Big companies are not just 'Company' they are a lot of small teams doing their own things. They need to coordinate with other people for public announcements etc. and security team is probably also looking at it.
Your conspiracy theory needs some work.
I think you’re giving Musk too much credit.
SpaceX will be re-valued on Anthropic's, or OpenAI's success, he, and his people are smart enough to understand this.
When he was talking about neoclouds, he was talking about the smaller guys who are getting bullied by vendors (mainly Nvidia) to buy as much hardware as possible (more than they want to). They paid more, for more, and needed to take on more debt, to end up (currently anyways) being well below capacity.
Over the next few years, unless growth keeps up (and probably accelerates), they'll need to sell, or restructure.
The buildouts by Microsoft, Google, Meta, OpenAI, and Anthropic are currently safe. The neoclouds that they've signed contracts with, are safe, but based on reports, that's roughly 60% of current capacity (it varies by report, but they're all under 75%).
SpaceX obviously has multiple sources of income, not just data center rents
So really, there's no way to say what was compromised and where.
This could have been avoided by having extensions signed by company doing them with their own keys and have them reviewed
I didn’t need any more evidence. The media is fake and everything you see is designed to affect the stock price somewhere and if it can’t affect the stock price, you don’t see it.
But holy shit, they’re asking me if I saw the “rogue agents”.
Trillions of dollars are involved here to swing clueless people into being scared and also awed. It’s gross.
Nothing went “rogue”. They asked for a solution and got one. Their agents didn’t go off and do thing out of their own idle agency.
In all seriousness, there is nobody at Anthropic who can even give you that answer, because nobody there reads their pushed code anymore. Take a look at the previous Claude Code leaked codebases if you don't believe me, there is hundreds of files with 1000+ or more import statements at the top.
Any human would immediately tell you that it needs to be refactored from scratch. Their codebase also leaked that they're using review bots automatically instead of a human-in-the-loop review process.
[1] https://m.youtube.com/watch?v=3TNpOD6bov8
edit: downvoting me doesn't make it untrue, by the way. Check the leaked codebases, I dare you to provide evidence to the contrary.
It sure seems like they've been vibecoding with everyone asleep at the wheel for a while.