Evidence · DiggingBeagle record
Socket: Cursor distribution and absent Open VSX publication records
Independent comparison of Open VSX append-only registry event history, npm metadata and Cursor marketplace incident confirmation.
- Published
- Oct 30, 2026
- Source role
- independent technical reproduction
Evidence record
Independent comparison of Open VSX append-only registry event history, npm metadata and Cursor marketplace incident confirmation.
Claim-level citations (1)
- supportsMalicious Claude Code extension builds reached Cursor distribution channels: Socket found no publication or removal event for Claude Code extension 2.1.313 in the reviewed Open VSX change feed and no matching npm publication entry; this weakens early claims about those channels without negating Cursor’s separate marketplace incident.
Open VSX Has No Publication Record for 2.1.313; npm records also skip 2.1.313; Cursor Publishes Remediation Guidance