You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
When a marketplace fails to load or is not found, its name is escaped before being placed into the message, so a hostile name cannot inject text into what you see.
Details
Covers both the Warning: Failed to load marketplace ' warning and the Marketplace " not-found error from /plugin.
Plugin install also passes a callback for the marketplace refresh outcome, so the result of a refresh can be reported back to the caller.
Evidence
Warning: Failed to load marketplace ', Marketplace "
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree/plugin install plugin@marketplace now refreshes the marketplace first, so newly published plugins install without a manual marketplace…
