Dworken from Anthropic here, this did not involve a compromise of any Anthropic systems. A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this. The versions on our official channels including VS Code and OpenVSX are not affected and this only impacts Cursor users.
I'm skeptical that the corporate laptop wasn't somehow compromised - or at least the key material leaked.
>the corporate laptop
an anthropic laptop? why are you sketpical?
I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.
In fairness, that is very surprising.
Reading between the lines, it seems like Anthropic isn't involved in the "official by Anthropic" extension at all.
Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.
Wow if that is the case… Cursor certainly needs to communicate much more clearly that Anthropic wasn’t involved in this at all.
Cursor is now Grok, so are you really surprised?
Exactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?
Because what they had was some kind of admin access to Cursor's mirror of OpenVSX, and not anything else.