Release integrity

The same version of a plugin or editor extension can be served by several stores and repositories. HOL records what each one serves, build by build, and notes when they disagree, when a build changes under the same version, or when a version disappears. It records what was served, not who changed it or why, and it does not say whether a build is safe to install.

Incident advisories

For incidents with no CVE. HOL publishes one only when two independent public sources report it, and marks it retracted with a dated note if it turns out to be wrong.

HOL-2026-0001 · published

Modified Claude Code extension 2.1.313 served through the Cursor marketplace

Affects
Claude Code for VS Code (anthropic.claude-code), 2.1.313
Fixed in
2.1.314
Served through
Cursor marketplace (Open VSX mirror)
Reported not affected
VS Marketplace
Reported window
to UTC

Two public reports say a modified build of version 2.1.313 was served to Cursor users for about 11 hours and added code that opened remote access to the machine. Both say the VS Marketplace build was not affected and that Cursor removed the version, rotated keys and restored the marketplace. Version 2.1.314 followed. Anyone who installed 2.1.313 from Cursor should follow the remediation steps in the reports.

What HOL observed: Open VSX no longer serves 2.1.313 (it answers 404 for that version) and serves 2.1.314. HOL’s release ledger compares the builds each store serves for this extension from 2026-10-30.

Sources

Recent integrity events

Also available as RSS and JSON. Listing owners can get their listing's events by webhook from the Guard dashboard.

No integrity events recorded yet.

AI coding extensions HOL follows

The newest build each store serves, for linux-x64 or the universal build. The digest is the start of the build's SHA-256 as the store's signature archive states it; HOL does not download the extension itself.

amazonwebservices.amazon-q-vscode

Stores serving amazonwebservices.amazon-q-vscode
ChannelVersionDigestProvenanceSeen
VS Marketplace2.9.08be707c3b0cfSigned by the store · 19.3 MB
Open VSX2.9.08be707c3b0cfSigned by the store · 19.3 MB
Cursor2.9.08be707c3b0cfSigned by the store · 19.3 MB

anthropic.claude-code

Stores serving anthropic.claude-code
ChannelVersionDigestProvenanceSeen
VS Marketplace2.1.314linux-x64bd97f320e5eaSigned by the store · 135.1 MB
Open VSX2.1.314linux-x64bd97f320e5eaSigned by the store · 135.1 MB
Cursor2.1.314linux-x64bd97f320e5eaSigned by the store · 135.1 MB

augment.vscode-augment

Stores serving augment.vscode-augment
ChannelVersionDigestProvenanceSeen
VS Marketplace0.905.0336a87f99352Signed by the store · 22.2 MB
Open VSX0.904.1f8bc24e3fc43Signed by the store · 22.2 MB
Cursor0.904.1f8bc24e3fc43Signed by the store · 22.2 MB

blackboxapp.blackbox

Stores serving blackboxapp.blackbox
ChannelVersionDigestProvenanceSeen
VS Marketplace2.8.53820e78a1e84bSigned by the store · 19.7 MB

codeium.codeium

Stores serving codeium.codeium
ChannelVersionDigestProvenanceSeen
VS Marketplace1.49.27cb0d1d066fcSigned by the store · 3.6 MB
Open VSX1.48.2703e0aeef63fSigned by the store · 3.6 MB

coderabbit.coderabbit-vscode

Stores serving coderabbit.coderabbit-vscode
ChannelVersionDigestProvenanceSeen
VS Marketplace0.25.06eda705f40ceSigned by the store · 0.9 MB
Open VSX0.25.04e7ae2c06289Signed by the store · 0.9 MB
Cursor0.25.04e7ae2c06289Signed by the store · 0.9 MB

codium.codium

Stores serving codium.codium
ChannelVersionDigestProvenanceSeen
VS Marketplace2.2.93fbb9beeaee5Signed by the store · 4.3 MB
Open VSX2.2.9a7971e7f96f9Signed by the store · 4.3 MB
Cursor2.2.9a7971e7f96f9Signed by the store · 4.3 MB

continue.continue

Stores serving continue.continue
ChannelVersionDigestProvenanceSeen
VS Marketplace2.1.0linux-x643b62f9c538f4Signed by the store · 76.1 MB
Open VSX2.1.0linux-x643b62f9c538f4Signed by the store · 76.1 MB
Cursor2.1.0linux-x643b62f9c538f4Signed by the store · 76.1 MB

danielsanmedium.dscodegpt

Stores serving danielsanmedium.dscodegpt
ChannelVersionDigestProvenanceSeen
VS Marketplace3.24.802eff29595f6bSigned by the store · 35.1 MB
Open VSX3.24.802eff29595f6bSigned by the store · 35.1 MB
Cursor3.24.802eff29595f6bSigned by the store · 35.1 MB

factory.factory-vscode-extension

Stores serving factory.factory-vscode-extension
ChannelVersionDigestProvenanceSeen
VS Marketplace0.2.30b242471d1b6Signed by the store · 0.4 MB
Open VSX0.2.020bb95018390Signed by the store · 0.4 MB
Cursor0.2.020bb95018390Signed by the store · 0.4 MB

github.copilot

Stores serving github.copilot
ChannelVersionDigestProvenanceSeen
VS Marketplace1.388.0ed18caf3e3cdSigned by the store · 19.0 MB

github.copilot-chat

Stores serving github.copilot-chat
ChannelVersionDigestProvenanceSeen
VS Marketplace0.48.17852df60c171Signed by the store · 19.4 MB

google.gemini-cli-vscode-ide-companion

Stores serving google.gemini-cli-vscode-ide-companion
ChannelVersionDigestProvenanceSeen
VS Marketplace0.20.0809ee084e3abSigned by the store · 0.7 MB
Open VSX0.20.0809ee084e3abSigned by the store · 0.7 MB
Cursor0.20.0809ee084e3abSigned by the store · 0.7 MB

google.geminicodeassist

Stores serving google.geminicodeassist
ChannelVersionDigestProvenanceSeen
VS Marketplace2.107.00a123f1fdfc4Signed by the store · 154.3 MB
Open VSX2.107.00a123f1fdfc4Signed by the store · 154.3 MB
Cursor2.107.00a123f1fdfc4Signed by the store · 154.3 MB

kilocode.kilo-code

Stores serving kilocode.kilo-code
ChannelVersionDigestProvenanceSeen
VS Marketplace7.8.25linux-x64e0ca96d68172Signed by the store · 142.8 MB
Open VSX7.8.25linux-x64e0ca96d68172Signed by the store · 142.8 MB
Cursor7.8.25linux-x64e0ca96d68172Signed by the store · 142.8 MB

kombai.kombai

Stores serving kombai.kombai
ChannelVersionDigestProvenanceSeen
VS Marketplace2.0.163b8d5574df2e4Signed by the store · 29.4 MB
Open VSX2.0.163b8d5574df2e4Signed by the store · 29.4 MB
Cursor2.0.163b8d5574df2e4Signed by the store · 29.4 MB

openai.chatgpt

Stores serving openai.chatgpt
ChannelVersionDigestProvenanceSeen
VS Marketplace26.51021.22027linux-x6408e18d1d3f7aSigned by the store · 408.3 MB
Open VSX26.51021.22027linux-x6408e18d1d3f7aSigned by the store · 408.3 MB
Cursor26.51021.22027linux-x6408e18d1d3f7aSigned by the store · 408.3 MB

rooveterinaryinc.roo-cline

Stores serving rooveterinaryinc.roo-cline
ChannelVersionDigestProvenanceSeen
VS Marketplace3.54.0caf96d596d69Signed by the store · 29.4 MB
Open VSX3.54.0777c0f958dc0Signed by the store · 29.4 MB
Cursor3.54.0777c0f958dc0Signed by the store · 29.4 MB

saoudrizwan.claude-dev

Stores serving saoudrizwan.claude-dev
ChannelVersionDigestProvenanceSeen
VS Marketplace4.1.26d8ea4c350505Signed by the store · 13.3 MB
Open VSX4.1.26d8ea4c350505Signed by the store · 13.3 MB
Cursor4.1.26d8ea4c350505Signed by the store · 13.3 MB

sourcegraph.amp

Stores serving sourcegraph.amp
ChannelVersionDigestProvenanceSeen
VS Marketplace0.0.17727993973b73a74d66b3Signed by the store · 16.2 MB

sourcegraph.cody-ai

Stores serving sourcegraph.cody-ai
ChannelVersionDigestProvenanceSeen
VS Marketplace1.156.07cfaae42189bSigned by the store · 31.0 MB
Open VSX1.156.07cfaae42189bSigned by the store · 31.0 MB
Cursor1.156.07cfaae42189bSigned by the store · 31.0 MB

sst-dev.opencode

Stores serving sst-dev.opencode
ChannelVersionDigestProvenanceSeen
VS Marketplace1.0.0ddec815ab9a4Signed by the store · 0.0 MB
Open VSX1.0.0ddec815ab9a4Signed by the store · 0.0 MB
Cursor1.0.0ddec815ab9a4Signed by the store · 0.0 MB

supermaven.supermaven

Stores serving supermaven.supermaven
ChannelVersionDigestProvenanceSeen
VS Marketplace1.1.12linux-x649f898d75d344Signed by the store · 5.6 MB
Open VSX1.1.5e7f5efa2919bSigned by the store · 0.2 MB
Cursor1.1.5e7f5efa2919bSigned by the store · 0.2 MB

tabnine.tabnine-vscode

Stores serving tabnine.tabnine-vscode
ChannelVersionDigestProvenanceSeen
VS Marketplace3.335.0f8e3cd5ff9a8Signed by the store · 2.2 MB
Open VSX3.346.8c2204d53f7deSigned by the store · 7.4 MB
Cursor3.346.8c2204d53f7deSigned by the store · 7.4 MB

zencoderai.zencoder

Stores serving zencoderai.zencoder
ChannelVersionDigestProvenanceSeen
VS Marketplace3.85.9011linux-x64e92639d4f7f0Signed by the store · 54.3 MB
Open VSX3.85.9011linux-x64e92639d4f7f0Signed by the store · 54.3 MB
Cursor3.85.9011linux-x64e92639d4f7f0Signed by the store · 54.3 MB

How it is recorded

  • Plugins: the commit HOL scanned and its git tree hash, and the commit the Claude Code official marketplace pins, looked up in the source repository every six hours in rotation.
  • Editor extensions: the newest build on Open VSX, the VS Marketplace and Cursor, read from each store's signature archive.
  • Open VSX and Cursor serve the same packages, so a difference between them is an event. Publishers often package separately for the VS Marketplace, so a difference with it shows on the listing's history only.
  • A version counts as withdrawn only when Open VSX answers that it no longer serves that exact version.
  • Paid plans never change what is recorded or shown. See how the Trust Score is computed.

Before you install: Claude Code · Codex · Cursor