Day 7 · 2026-10-31
20 launches checked81 claims quoted word for word130 user reports linked10 verified fixes linked26 corrections publishedLive 8 days5 of 5 founding sponsor spots left
AI launches, checked against real usersLast re-stamped 31 Oct 2026

AI coding tools / Compare

Copilot Fusion vs Cursor Marketplace security notice (Claude Code extension): which delivered after 7 days?

Neither has a verdict yet: both are stamped Too early, with fewer than about five solid user reports each.

Copilot FusionCursor Marketplace security notice (Claude Code extension)
VerdictToo earlyToo early
Claims held23
Claims mixed00
Claims failed10
Claims unclear02
User reports45
Launched28 Oct 202629 Oct 2026
Last stamped30 Oct 202631 Oct 2026

No. 015 · GitHub

Copilot Fusion

Day 3 of 7
Too earlyDay 7 verdict

Generally available and the benchmark checks out, but "all plans in all four clients" does not: top tiers are paid-only and two clients have gaps.

Launched
28 Oct 2026
Stamped
30 Oct 2026
Claims
✓2 held · ~0 mixed · ✗1 failed · ?0 unclear
Reports
4 (0 praise · 4 problem · 0 mixed)

What they claimed

“In the Artificial Analysis Coding Agent Index, Copilot Fusion Max scored 60, within two points of Claude Code with Opus 5.5 Max.”
✓ Holds
“GitHub Copilot Fusion is generally available.”
✓ Holds
“Copilot Fusion is available on all Copilot plans in Visual Studio Code, the GitHub Copilot app, GitHub Copilot CLI, and JetBrains IDEs.”
✗ Fails

Full receipt

No. 017 · Cursor (Anysphere)

Cursor Marketplace security notice (Claude Code extension)

Day 2 of 7
Too earlyDay 7 verdict

Day 2: independent analyses back Cursor on the failed SSH step and the leftover persistence; the 5,000-user count and its own audit can't be checked from outside.

Launched
29 Oct 2026
Stamped
31 Oct 2026
Claims
✓3 held · ~0 mixed · ✗0 failed · ?2 unclear
Reports
5 (0 praise · 1 problem · 4 mixed)

What they claimed

“These malicious versions of the extension were not developed by Anthropic.”
✓ Holds
“Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”
✓ Holds
“We audited access and confirmed no other extensions were tampered with.”
? Unclear
“Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”
✓ Holds
“We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users.”
? Unclear

Full receipt

Both stamps come from the public user reports linked on each receipt, under the same method. Verdicts are opinion and are never paid for.

Keep comparingall AI coding tools