The Claude Code backdoor put extension marketplace trust on trial. What are open-source tooling ecosystems doing about it?
A tampered Claude Code extension lived in Cursor's marketplace for 11 hours. Here's what the reviewed docs say about signing, and what developers should check now.