Hacker News new | past | comments | ask | show | jobs | submit
rietta | on: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Do publishers not sign their packages before it gets to Cursor for distribution? Does Cursor itself apply and enforce any package integrity?