Three different marketplaces have been mentioned in this discussion:
1. The Cursor Marketplace (never heard of this one, it’s possibly a custom marketplace hard-wired into Cursor, which is architecturally a VS Code fork?)
2. The Visual Studio marketplace, hard-wired into VS Code
3. Open VSX
If I understand this thread correctly, then #1 and #3 had compromised versions, and nobody has made a statement yet about the status of #2.
Cursor maintains a mirror of OpenVSX... Kinda. Except they inject some of their own extensions in it. But it's mostly a mirror.
Edit: Cursor is apparently stating now that the tampered files were only on their mirror not OpenVSX.
[flagged]