@nixCraft@mastodon.social was this Anthropic being compromised or the OpenVSX registry. My understanding is that it's OpenVSX that was compromised, or specifically, OpenVSX doesn't check the software that people register with them before linking millions of users to it.