AI coding tools / Compare
Copilot Fusion vs Cursor Marketplace security notice (Claude Code extension): which delivered after 7 days?
Neither has a verdict yet: both are stamped Too early, with fewer than about five solid user reports each.
| Copilot Fusion | Cursor Marketplace security notice (Claude Code extension) | |
|---|---|---|
| Verdict | Too early | Too early |
| Claims held | 2 | 3 |
| Claims mixed | 0 | 0 |
| Claims failed | 1 | 0 |
| Claims unclear | 0 | 2 |
| User reports | 4 | 5 |
| Launched | 28 Oct 2026 | 29 Oct 2026 |
| Last stamped | 30 Oct 2026 | 31 Oct 2026 |
No. 015 · GitHub
Copilot Fusion
Day 3 of 7Generally available and the benchmark checks out, but "all plans in all four clients" does not: top tiers are paid-only and two clients have gaps.
- Launched
- 28 Oct 2026
- Stamped
- 30 Oct 2026
- Claims
- ✓2 held · ~0 mixed · ✗1 failed · ?0 unclear
- Reports
- 4 (0 praise · 4 problem · 0 mixed)
What they claimed
“In the Artificial Analysis Coding Agent Index, Copilot Fusion Max scored 60, within two points of Claude Code with Opus 5.5 Max.”✓ Holds
“GitHub Copilot Fusion is generally available.”✓ Holds
“Copilot Fusion is available on all Copilot plans in Visual Studio Code, the GitHub Copilot app, GitHub Copilot CLI, and JetBrains IDEs.”✗ Fails
No. 017 · Cursor (Anysphere)
Cursor Marketplace security notice (Claude Code extension)
Day 2 of 7Day 2: independent analyses back Cursor on the failed SSH step and the leftover persistence; the 5,000-user count and its own audit can't be checked from outside.
- Launched
- 29 Oct 2026
- Stamped
- 31 Oct 2026
- Claims
- ✓3 held · ~0 mixed · ✗0 failed · ?2 unclear
- Reports
- 5 (0 praise · 1 problem · 4 mixed)
What they claimed
“These malicious versions of the extension were not developed by Anthropic.”✓ Holds
“Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”✓ Holds
“We audited access and confirmed no other extensions were tampered with.”? Unclear
“Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”✓ Holds
“We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users.”? Unclear
Both stamps come from the public user reports linked on each receipt, under the same method. Verdicts are opinion and are never paid for.
Keep comparingall AI coding tools
- Copilot Fusion alternatives
- Cursor Marketplace security notice (Claude Code extension) alternatives
- ChatGPT Pro: 2x Work and Codex usage vs Copilot Fusion
- Claude Ultra (no 5-hour limit) vs Copilot Fusion
- Codex CLI 0.157.0 vs Copilot Fusion
- Copilot Fusion vs OpenCode 2.0
- ChatGPT Pro: 2x Work and Codex usage vs Cursor Marketplace security notice (Claude Code extension)
- Claude Ultra (no 5-hour limit) vs Cursor Marketplace security notice (Claude Code extension)
- Codex CLI 0.157.0 vs Cursor Marketplace security notice (Claude Code extension)
- Cursor Marketplace security notice (Claude Code extension) vs OpenCode 2.0
Weekly email · Fridays 14:00 CEST
Get the Friday Receipt
Every Friday: the week’s new day 7 receipts, the ones we re-stamped, and any corrections. One email, no sponsors from companies we review.
Prefer not to give an email? Follow the RSS feed or @day7dev on X.