Why wouldn't their review system see a published extension and determine the very second it's published that it didn't match the results of a standard workflow?
Because it wasn't published by them or hosted on a system they control, it was done directly on Cursor's mirror of OpenVSX with a modified copy of the original extension.
{"deleted":true,"id":50308418,"parent":50304275,"time":1793385972,"type":"comment"}