AI coding tools / Compare
Claude Ultra (no 5-hour limit) vs Cursor Marketplace security notice (Claude Code extension): which delivered after 7 days?
Neither has a verdict yet: both are stamped Too early, with fewer than about five solid user reports each.
| Claude Ultra (no 5-hour limit) | Cursor Marketplace security notice (Claude Code extension) | |
|---|---|---|
| Verdict | Too early | Too early |
| Claims held | 2 | 3 |
| Claims mixed | 0 | 0 |
| Claims failed | 0 | 0 |
| Claims unclear | 3 | 2 |
| User reports | 4 | 5 |
| Launched | 30 Oct 2026 | 29 Oct 2026 |
| Last stamped | 31 Oct 2026 | 31 Oct 2026 |
No. 020 · Anthropic
Claude Ultra (no 5-hour limit)
Day 1 of 7Day 1: one hands-on account confirms the five-hour bar is gone; users who say they have paid for months still have it. Rollout is staged.
- Launched
- 30 Oct 2026
- Stamped
- 31 Oct 2026
- Claims
- ✓2 held · ~0 mixed · ✗0 failed · ?3 unclear
- Reports
- 4 (0 praise · 4 problem · 0 mixed)
What they claimed
“We’re also removing the 5-hour limit for verified Ultra accounts, starting today with most existing subscribers.”? Unclear
“Newer accounts keep a temporary limit until they’re verified, which helps us prevent fraud and abuse. You'll get an email when it's removed.”? Unclear
“Weekly limits remain unchanged.”? Unclear
“If you’re a subscriber, there’s nothing you need to do.”✓ Holds
“To check, go to Settings > Usage. If you don't see a Current session bar, your account is verified.”✓ Holds
No. 017 · Cursor (Anysphere)
Cursor Marketplace security notice (Claude Code extension)
Day 2 of 7Day 2: independent analyses back Cursor on the failed SSH step and the leftover persistence; the 5,000-user count and its own audit can't be checked from outside.
- Launched
- 29 Oct 2026
- Stamped
- 31 Oct 2026
- Claims
- ✓3 held · ~0 mixed · ✗0 failed · ?2 unclear
- Reports
- 5 (0 praise · 1 problem · 4 mixed)
What they claimed
“These malicious versions of the extension were not developed by Anthropic.”✓ Holds
“Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”✓ Holds
“We audited access and confirmed no other extensions were tampered with.”? Unclear
“Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”✓ Holds
“We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users.”? Unclear
Both stamps come from the public user reports linked on each receipt, under the same method. Verdicts are opinion and are never paid for.
Keep comparingall AI coding tools
- Claude Ultra (no 5-hour limit) alternatives
- Cursor Marketplace security notice (Claude Code extension) alternatives
- ChatGPT Pro: 2x Work and Codex usage vs Claude Ultra (no 5-hour limit)
- Claude Ultra (no 5-hour limit) vs Codex CLI 0.157.0
- Claude Ultra (no 5-hour limit) vs Copilot Fusion
- Claude Ultra (no 5-hour limit) vs OpenCode 2.0
- ChatGPT Pro: 2x Work and Codex usage vs Cursor Marketplace security notice (Claude Code extension)
- Codex CLI 0.157.0 vs Cursor Marketplace security notice (Claude Code extension)
- Copilot Fusion vs Cursor Marketplace security notice (Claude Code extension)
- Cursor Marketplace security notice (Claude Code extension) vs OpenCode 2.0
Weekly email · Fridays 14:00 CEST
Get the Friday Receipt
Every Friday: the week’s new day 7 receipts, the ones we re-stamped, and any corrections. One email, no sponsors from companies we review.
Prefer not to give an email? Follow the RSS feed or @day7dev on X.