Open VSX
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
3recommend
2warn against
Nov 19, 2025first mention
Oct 31, 2026latest mention
Why people recommend it
“While Open VSX is great”
“I've not struggled to find the things I need at https://open-vsx.org”
Show 1 more
“There's https://open-vsx.org/.”
Caveats and dissent
“https://open-vsx.org/ is where the attack took place”
“I wonder if it was open-vsx specific?”
Often compared with
Threads where it came up
- Backdoor in Claude Code for VS Code extension on the Cursor Marketplace 5 mentions
- Switch VSCodium Between Open VSX and MS Marketplace 1 mention
- GitHub confirms breach of 3,800 repos via malicious VSCode extension 1 mention
- Astral to Join OpenAI 1 mention
- VS Code deactivates IntelliCode in favor of the paid Copilot 1 mention
- Visual Studio Code Private Marketplace: Your Team's Secure+Curated Extension Hub 1 mention
Also written as OpenVSX. Data: open-vsx.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 10
It seems like they put a proxy in front of OpenVSX: https://cursor.com/help/customization/extensions However, statements around the internet (and in these comments) are less than definitive as to whether a) that proxy has a cache that was compromised; b) that proxy has select extensions which can be published directly to it by hand (one of which was compromised); c) other.
“OpenVSX does have an option to use OIDC instead of a long lived token for publishing.”
“Cursor Marketplace is OpenVSX + their own proxy”
Cursor didn’t always use Open VSX, it changed in late 2025. https://forum.cursor.com/t/extension-marketplace-changes-transition-to-openvsx/109138 Also worth noting that it doesn’t use Open VSX directly but uses a cursor hosted mirror at https://marketplace.cursorapi.com/open-vsx-mirror
“https://open-vsx.org/ is where the attack took place”
“While Open VSX is great”
“I wonder if it was open-vsx specific?”
“I've not struggled to find the things I need at https://open-vsx.org”
“There's https://open-vsx.org/.”
“There's also an open marketplace: https://open-vsx.org/”