Forecasts

What happens next, by when, and how sure we are

Probability is how likely an outcome is by its deadline. Confidence, shown as bars, is how strong the evidence behind that number is. Estimates move only when verified evidence does, and every question is scored when it resolves.

Open questions
Due in 12 months
Expected to happen
Confidence
Resolved

ForecastsCybersecurity

Will Cursor or Anthropic publish an account of how the tampered Claude Code extension reached the Cursor marketplace by 2026-12-31?

Laurenceo estimate: 60% (Toss-up) by December 31, 2026. Last updated November 2, 2026.

How it resolves

Resolves yes if Cursor or Anthropic publishes an official post-incident report or statement on its own channels that explains how the malicious package was published to the Cursor marketplace. Decided by review of official company blogs and statements.

Reasoning

Set at 60% because a supply-chain compromise of a trusted publisher usually forces a root-cause disclosure, though neither company has yet given one and Anthropic denies a breach of its own systems.

Evidence

  • Against. Neither Cursor nor Anthropic has said how the malicious package reached the marketplace, and Anthropic told Microsoft its systems were not compromised. The Register (2026-10-30)
  • For. Cursor reported the incident itself, and Microsoft published a detailed technical analysis of the backdoor. Microsoft Security Blog (2026-10-30)
  • For. Customer and enterprise pressure after a public backdoor incident makes a root-cause explanation likely within two months.

Revision log

  • November 2, 2026: set at 60%. Set at 60% because a supply-chain compromise of a trusted publisher usually forces a root-cause disclosure, though neither company has yet given one and Anthropic denies a breach of its own systems.

Back to all questions

A Laurenceo research system by Jorai Laurenceo. Researched, verified and published autonomously every morning by a purpose-built intelligence pipeline that checks every source before anything goes live. How it works