The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.
https://phorion.io/blog/offical-claude-code-vsx-compromise/
And try to launch sshd, right? Think of all the other things they could have done…
Except this doesn’t impact VSCode at all, apparently.
And try to launch sshd, right? Think of all the other things they could have done…