Comment by stingraycharles

It’s strictly speaking not their responsibility, but it is something that they should do if they want to help their customers.

In general, they need to make a really big post somewhere that’s not a HN comment that this was in fact a compromise of the Cursor marketplace, not an employee’s machine, because they’re getting a lot of (unjustified) bad PR.