What the internet is saying about Cursor IDE

What the internet is saying about "Cursor IDE"

🟢 Supporters

Clear bullish sentiment is thin in this data. The positive signals are mostly indirect.

• •"Cursor" is used as a reference product category. Two Show HN projects pitch themselves by analogy: "A Cursor-like workspace for your LaTeX papers" [17] and "Arsaze – Cursor for video editing (Tab-complete and agent edits)" [18]. The video-editing one reached 60 points.
• •Tooling treats Cursor as a first-class target. It is one of the named agents in a "Top 20 AI Coding Agent" ecosystem epic [5]. It also appears in default MCP setup configs [6], MCP client docs [7], an agent-detection library [14] and an AI-agent login tool [12]. That suggests real installed-base relevance, though not enthusiasm.
• •Cursor responded publicly to the security incident. It published a security notice [9], and its blog is quoted with self-check instructions [8]. Anthropic's Felix said the incident "wasn't a compromise of Anthropic's systems," and attributed it to a malicious actor using access to Cursor's marketplace [8].
• •At least one buyer is still weighing a subscription. The Reddit poster is a full-stack developer (MERN, TypeScript, PostgreSQL) deciding between Cursor Premium and ChatGPT Plus [1]. That is consideration, not endorsement.

🔴 Skeptics

• •The marketplace backdoor is the dominant story.
  • •A tampered "Claude Code" extension was published on Cursor's marketplace [8][9][11][13].
  • •The HN thread had 553 comments and 1011 points [8], and a second thread had 399 points [11].
  • •Per the quoted Cursor blog text, the malicious extension "appends the attacker's public key, labeled svc-telemetry, to your SSH authorized keys" [8].
  • •Microsoft published a writeup on a "persistent SSH backdoor" [13].
  • •A free "Cassandra" tool was released so people can check whether they were affected [16].
• •Broader security concerns. A post titled "Embrace: RCE, Address Bar Spoofing and More in Cursor, Codex, Copilot and Claude" covers embedded-browser flaws in several AI assistants, Cursor included [15].
• •Value for money is questioned. The Reddit poster says "Cursor recently removed support for third-party models" and wonders whether Cursor Premium "is still worth paying for" [1].
• •Users are moving to other tools. One HN commenter wrote: "I used to use Cursor, then Codex, but since Opus 5.5 came out, I just use the Claude IDE" [2].
• •Competitive pressure. An HN post is titled "Grok Is Killing Cursor" [4]. Only the headline is available, so its argument is unknown.

⚪ Neutral Observers

• •A comparison post lists Claude Code, Codex CLI, Aider, OpenCode, Pi and Cursor side by side [3]. Only the title is available, with minimal engagement (4 points).
• •Cursor is one of many VS Code-family editors that security and forensics tooling now covers (alongside Windsurf, Trae, Kiro and others) [10].
• •Cursor appears in MCP and agent-detection integrations next to Windsurf, Zed, Codex, Gemini CLI and others [6][7][14]. It is one option among many.
• •Much of the "cursor" keyword traffic is unrelated, such as text-cursor and cursor-pagination items [19][34]. The GitHub matches in particular are mostly noise.

Cross-Platform Signals

• •Hacker News is the most active platform, and the security incident drives nearly all of its volume [8][9][11][13][16].
• •Reddit has only one relevant thread. It focuses on pricing and value after a reported change to third-party model support [1].
• •GitHub activity is integration plumbing. It covers MCP configs, agent detection and ecosystem lists, and has no sentiment either way.
• •Consensus and divergence. Sources agree Cursor is widely integrated and a major target for ecosystem tooling. Sentiment diverges: security worries and migration to Claude and Codex tools on one side, and continued "Cursor-like" product imitation on the other.

Community Verdict

In this window, opinion on Cursor is cautious to negative, driven mainly by the Claude Code extension backdoor on its marketplace. That incident drew the largest engagement of any Cursor-related item. Alongside it come questions about subscription value and anecdotes of developers moving to Claude- or Codex-centered workflows [1][2]. Cursor remains deeply embedded in the tooling ecosystem and still serves as the template for new AI-editor products [5][17][18]. The evidence is sparse, though, with only one Reddit thread and several title-only HN items, so the verdict should be read as tentative.

---

Based on Reddit + Hacker News + GitHub data from the last 30 days, researched with last30days by Matt Van Horn.