logoalt Hacker News

Rohansi • today at 4:54 PM • 1 reply • view on HN

Then you would have the same problem. Anthropic has no presence on the Cursor Marketplace, so what is stopping someone from claiming the name and just not associating a domain name?


Replies

yunnpp • today at 6:07 PM

Nothing, but that extension would be flagged as "unknown" or "third-party" source or something and you'd get a big warning before proceeding to install it.

Also, a basic scan of the package would have flagged an ssh backdoor, no? It didn't seem to me like its obfuscation was very sophisticated.