I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.
reply>the corporate laptop
replyan anthropic laptop? why are you sketpical?
I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.
replyIn fairness, that is very surprising.
Reading between the lines, it seems like Anthropic isn't involved in the "official by Anthropic" extension at all.
replyCursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.
Wow if that is the case… Cursor certainly needs to communicate much more clearly that Anthropic wasn’t involved in this at all.
replyCursor is now Grok, so are you really surprised?
replyExactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?
replyBecause what they had was some kind of admin access to Cursor's mirror of OpenVSX, and not anything else.
reply