KSkshri24·Nov 30, 2025
In Zigbook Is Plagiarizing the Zigtools PlaygroundEclipseFdn
open-vsx.org
Python2025–2025
EclipseFdn / open-vsx.org
open-vsx.org
Source of open-vsx.org
5Distinct people
5Mentions
0Explicit recommenders
421GitHub stars
What to know before exploring
What it is
Source of open-vsx.org
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by week5 dated mentions
Observed mentions: 2025-04-24 06:45:51 UTC to 2025-11-30 11:45:06 UTC. Weeks start Monday, UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Apr 21 | 2025-04-21 00:00:00 UTC | 2025-04-28 00:00:00 UTC | 2 | 0 | 2 |
| Apr 28 | 2025-04-28 00:00:00 UTC | 2025-05-05 00:00:00 UTC | 0 | 0 | 0 |
| May 5 | 2025-05-05 00:00:00 UTC | 2025-05-12 00:00:00 UTC | 0 | 0 | 0 |
| May 12 | 2025-05-12 00:00:00 UTC | 2025-05-19 00:00:00 UTC | 0 | 0 | 0 |
| May 19 | 2025-05-19 00:00:00 UTC | 2025-05-26 00:00:00 UTC | 0 | 0 | 0 |
| May 26 | 2025-05-26 00:00:00 UTC | 2025-06-02 00:00:00 UTC | 0 | 0 | 0 |
| Jun 2 | 2025-06-02 00:00:00 UTC | 2025-06-09 00:00:00 UTC | 0 | 0 | 0 |
| Jun 9 | 2025-06-09 00:00:00 UTC | 2025-06-16 00:00:00 UTC | 0 | 0 | 0 |
| Jun 16 | 2025-06-16 00:00:00 UTC | 2025-06-23 00:00:00 UTC | 0 | 0 | 0 |
| Jun 23 | 2025-06-23 00:00:00 UTC | 2025-06-30 00:00:00 UTC | 0 | 0 | 0 |
| Jun 30 | 2025-06-30 00:00:00 UTC | 2025-07-07 00:00:00 UTC | 0 | 0 | 0 |
| Jul 7 | 2025-07-07 00:00:00 UTC | 2025-07-14 00:00:00 UTC | 0 | 0 | 0 |
| Jul 14 | 2025-07-14 00:00:00 UTC | 2025-07-21 00:00:00 UTC | 2 | 0 | 2 |
| Jul 21 | 2025-07-21 00:00:00 UTC | 2025-07-28 00:00:00 UTC | 0 | 0 | 0 |
| Jul 28 | 2025-07-28 00:00:00 UTC | 2025-08-04 00:00:00 UTC | 0 | 0 | 0 |
| Aug 4 | 2025-08-04 00:00:00 UTC | 2025-08-11 00:00:00 UTC | 0 | 0 | 0 |
| Aug 11 | 2025-08-11 00:00:00 UTC | 2025-08-18 00:00:00 UTC | 0 | 0 | 0 |
| Aug 18 | 2025-08-18 00:00:00 UTC | 2025-08-25 00:00:00 UTC | 0 | 0 | 0 |
| Aug 25 | 2025-08-25 00:00:00 UTC | 2025-09-01 00:00:00 UTC | 0 | 0 | 0 |
| Sep 1 | 2025-09-01 00:00:00 UTC | 2025-09-08 00:00:00 UTC | 0 | 0 | 0 |
| Sep 8 | 2025-09-08 00:00:00 UTC | 2025-09-15 00:00:00 UTC | 0 | 0 | 0 |
| Sep 15 | 2025-09-15 00:00:00 UTC | 2025-09-22 00:00:00 UTC | 0 | 0 | 0 |
| Sep 22 | 2025-09-22 00:00:00 UTC | 2025-09-29 00:00:00 UTC | 0 | 0 | 0 |
| Sep 29 | 2025-09-29 00:00:00 UTC | 2025-10-06 00:00:00 UTC | 0 | 0 | 0 |
| Oct 6 | 2025-10-06 00:00:00 UTC | 2025-10-13 00:00:00 UTC | 0 | 0 | 0 |
| Oct 13 | 2025-10-13 00:00:00 UTC | 2025-10-20 00:00:00 UTC | 0 | 0 | 0 |
| Oct 20 | 2025-10-20 00:00:00 UTC | 2025-10-27 00:00:00 UTC | 0 | 0 | 0 |
| Oct 27 | 2025-10-27 00:00:00 UTC | 2025-11-03 00:00:00 UTC | 0 | 0 | 0 |
| Nov 3 | 2025-11-03 00:00:00 UTC | 2025-11-10 00:00:00 UTC | 0 | 0 | 0 |
| Nov 10 | 2025-11-10 00:00:00 UTC | 2025-11-17 00:00:00 UTC | 0 | 0 | 0 |
| Nov 17 | 2025-11-17 00:00:00 UTC | 2025-11-24 00:00:00 UTC | 0 | 0 | 0 |
| Nov 24 | 2025-11-24 00:00:00 UTC | 2025-12-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
5 sources> Open VSX does not have all extensions
This can be solved quite easily for open source extensions: https://github.com/EclipseFdn/open-vsx.org/wiki/Auto-Publish...
Vetting however is trickier. I hope Cursor can fund this effort!
In Code highlighting extension for Cursor AI used for $500k theftThe biggest "reveal" here is that open-vsx has far less effective anti-fraud measures than the end users of Cursor, Windsurf, etc. expect.
It seems that an attacker was able to easily manipulate download counts, placing their malicious extension high in search results.
And this is far from the first open-vsx vulnerability in the past month. See: https://blog.koi.security/marketplace-takeover-how-we-couldv... which describes how open-vsx was installing arbitrary packages and running their build scripts in a privileged environment.
And the instructions to report malicious extensions, even now, are practically nonexistent: https://github.com/EclipseFdn/open-vsx.org/wiki/Guidelines-o...
With billions of dollars being poured into this ecosystem, it's mind-boggling that security is being treated as such an afterthought. Consider this when choos
Read the rest
ing tools.
I happened to be poking around in their issues to see if there were mirrors and observed that in addition to the linked status page on this thread, the underlying Eclipse Foundation has their own (multiple) status tracking channels
most relevant: https://www.eclipsestatus.io/incident/549796?mp=true
their helpdesk ticket: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/5924...
the issue in their GitHub issue tracking for the site: https://github.com/EclipseFdn/open-vsx.org/issues/3805
the tl;dr seems to be a massive storage failure affecting a bunch of Eclipse services, and just like any storage problem putting all the bytes back is some "please wait"
In OpenVSX, which VSCode forks rely on for extensions, down for 24 hoursSee statement [1] and tracking issues [2] [3].
[1]: https://github.com/EclipseFdn/open-vsx.org/issues/3805#issue...
[2]: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/5924
[3]: https://www.eclipsestatus.io/incident/549796
In Open VSX Registry Is Down