Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.