logoalt Hacker News

Phemist • yesterday at 2:39 PM • 2 replies • view on HN

Thanks for the clarification. Remaining question is then: why was version 2.1.313 yanked from both OpenVSX and the Cursor Marketplace then?

As discussed here:

https://cyberplace.social/@GossiTheDog/117528831681803563

and as can be seen as there is no version 2.1.313 here: https://open-vsx.org/extension/Anthropic/claude-code/2.1.313

but there is https://open-vsx.org/extension/Anthropic/claude-code/2.1.314 https://open-vsx.org/extension/Anthropic/claude-code/2.1.312


Replies

ddworken • yesterday at 2:48 PM

Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.