Cursor uses OpenVSX marketplace (https://open-vsx.org/), that all non-Microsoft forks of VSCode utilize (official marketplace is only allowed in official proprietary VSCode release). It's not really related to Cursor/SpaceX in any way.

I suspect it's still Anthropic who were hacked, because they control OpenVSX account with release privileges.

edit:

Binance confirms my suspicions, via https://www.binance.com/en/square/post/10-30-2026-claude-cod...

  The affected Open VSX extension is owned by Anthropic employee Igor Kofman, but it is unclear whether his account or another part of the publishing process was compromised.

Version 2.1.313 is also missing from the official VS Code marketplace (https://marketplace.visualstudio.com/items?itemName=anthropi...). This suggest to me that it was published and pulled, which means it was Antrophic that was hacked.

Version 2.1.313 is missing from the official Claude Code GitHub repo's CHANGELOG[0]. There's also no tag[1] for 2.1.313[1], but 2.1.312[2], and 2.1.314[3] exist.

0: https://github.com/anthropics/claude-code/blob/main/CHANGELO...

1: https://github.com/anthropics/claude-code/releases/tag/v2.1....

2: https://github.com/anthropics/claude-code/releases/tag/v2.1....

3: https://github.com/anthropics/claude-code/releases/tag/v2.1....

I am starting to have a hard time who is responsible for what. I no longer know what's the relationship between companies/products like Anthropic, Cursor, SpaceXAI, Copilot, etc.