Day 7 · 2026-10-31
20 launches checked81 claims quoted word for word130 user reports linked10 verified fixes linked26 corrections publishedLive 8 days5 of 5 founding sponsor spots left
AI launches, checked against real usersLast re-stamped 31 Oct 2026

AI coding tools / Compare

Codex CLI 0.157.0 vs Cursor Marketplace security notice (Claude Code extension): which delivered after 7 days?

Codex CLI 0.157.0 is stamped Delivered; Cursor Marketplace security notice (Claude Code extension) is still Too early to call, so this comparison isn't settled yet.

Codex CLI 0.157.0Cursor Marketplace security notice (Claude Code extension)
VerdictDeliveredToo early
Claims held03
Claims mixed10
Claims failed00
Claims unclear32
User reports85
Launched25 Sept 202629 Oct 2026
Last stamped30 Oct 202631 Oct 2026

No. 003 · OpenAI

Codex CLI 0.157.0

DeliveredDay 7 verdict

The release shipped with its background server, new models and fixes. Some Windows and Arch Linux users hit startup problems with the new server.

Launched
25 Sept 2026
Stamped
30 Oct 2026
Claims
✓0 held · ~1 mixed · ✗0 failed · ?3 unclear
Reports
8 (0 praise · 8 problem · 0 mixed)

What they claimed

“Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible.”
~ Mixed
“Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models.”
? Unclear
“Fixed configured proxy routing for realtime connections and standalone web search, including search redirects.”
? Unclear
“Added retries for transient file-upload failures and increased the upload timeout to five minutes.”
? Unclear

Full receipt

No. 017 · Cursor (Anysphere)

Cursor Marketplace security notice (Claude Code extension)

Day 2 of 7
Too earlyDay 7 verdict

Day 2: independent analyses back Cursor on the failed SSH step and the leftover persistence; the 5,000-user count and its own audit can't be checked from outside.

Launched
29 Oct 2026
Stamped
31 Oct 2026
Claims
✓3 held · ~0 mixed · ✗0 failed · ?2 unclear
Reports
5 (0 praise · 1 problem · 4 mixed)

What they claimed

“These malicious versions of the extension were not developed by Anthropic.”
✓ Holds
“Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”
✓ Holds
“We audited access and confirmed no other extensions were tampered with.”
? Unclear
“Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”
✓ Holds
“We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users.”
? Unclear

Full receipt

Both stamps come from the public user reports linked on each receipt, under the same method. Verdicts are opinion and are never paid for.

Keep comparingall AI coding tools