AI coding tools / Compare
Codex CLI 0.157.0 vs Cursor Marketplace security notice (Claude Code extension): which delivered after 7 days?
Codex CLI 0.157.0 is stamped Delivered; Cursor Marketplace security notice (Claude Code extension) is still Too early to call, so this comparison isn't settled yet.
| Codex CLI 0.157.0 | Cursor Marketplace security notice (Claude Code extension) | |
|---|---|---|
| Verdict | Delivered | Too early |
| Claims held | 0 | 3 |
| Claims mixed | 1 | 0 |
| Claims failed | 0 | 0 |
| Claims unclear | 3 | 2 |
| User reports | 8 | 5 |
| Launched | 25 Sept 2026 | 29 Oct 2026 |
| Last stamped | 30 Oct 2026 | 31 Oct 2026 |
No. 003 · OpenAI
Codex CLI 0.157.0
The release shipped with its background server, new models and fixes. Some Windows and Arch Linux users hit startup problems with the new server.
- Launched
- 25 Sept 2026
- Stamped
- 30 Oct 2026
- Claims
- ✓0 held · ~1 mixed · ✗0 failed · ?3 unclear
- Reports
- 8 (0 praise · 8 problem · 0 mixed)
What they claimed
“Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible.”~ Mixed
“Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models.”? Unclear
“Fixed configured proxy routing for realtime connections and standalone web search, including search redirects.”? Unclear
“Added retries for transient file-upload failures and increased the upload timeout to five minutes.”? Unclear
No. 017 · Cursor (Anysphere)
Cursor Marketplace security notice (Claude Code extension)
Day 2 of 7Day 2: independent analyses back Cursor on the failed SSH step and the leftover persistence; the 5,000-user count and its own audit can't be checked from outside.
- Launched
- 29 Oct 2026
- Stamped
- 31 Oct 2026
- Claims
- ✓3 held · ~0 mixed · ✗0 failed · ?2 unclear
- Reports
- 5 (0 praise · 1 problem · 4 mixed)
What they claimed
“These malicious versions of the extension were not developed by Anthropic.”✓ Holds
“Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”✓ Holds
“We audited access and confirmed no other extensions were tampered with.”? Unclear
“Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”✓ Holds
“We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users.”? Unclear
Both stamps come from the public user reports linked on each receipt, under the same method. Verdicts are opinion and are never paid for.
Keep comparingall AI coding tools
- Codex CLI 0.157.0 alternatives
- Cursor Marketplace security notice (Claude Code extension) alternatives
- ChatGPT Pro: 2x Work and Codex usage vs Codex CLI 0.157.0
- Claude Ultra (no 5-hour limit) vs Codex CLI 0.157.0
- Codex CLI 0.157.0 vs Copilot Fusion
- Codex CLI 0.157.0 vs OpenCode 2.0
- ChatGPT Pro: 2x Work and Codex usage vs Cursor Marketplace security notice (Claude Code extension)
- Claude Ultra (no 5-hour limit) vs Cursor Marketplace security notice (Claude Code extension)
- Copilot Fusion vs Cursor Marketplace security notice (Claude Code extension)
- Cursor Marketplace security notice (Claude Code extension) vs OpenCode 2.0
Weekly email · Fridays 14:00 CEST
Get the Friday Receipt
Every Friday: the week’s new day 7 receipts, the ones we re-stamped, and any corrections. One email, no sponsors from companies we review.
Prefer not to give an email? Follow the RSS feed or @day7dev on X.