2026-10-30 14:03 UTC
okay so, it is abundantly clear that the Cursor version of the Claude plugin was compromised (a fork of VS Code), but no-one seems to know for sure whether the vanilla VS Code version was as well
what we can see is that Anthropic has recently been updating the vanilla VS Code plugin once every weekday(!!! what the hell are they doing in there), and yesterday's, version .313, is missing from that history
But whether it existed and then was pulled, or never made it to this platform to begin with, makes a MASSIVE difference to how many infections there are, and notably Anthropic has not said jack yet – only Cursor has.
Does anyone know FOR SURE, from DIRECT EVIDENCE, whether deleting an individual version of a plugin removes it from the public version history list? Because if it does *not* hide the entry, then we can be reasonably sure it never hit this marketplace, which is good
And does anyone at Anthropic want to maybe give clear, helpful statements? 🙃 forgotten how to take action when there's a problem? need the AI to hold your hand?
Replies (0)
No replies.