logoalt Hacker News

yubblegum • today at 12:45 PM • 2 replies • view on HN

The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.

https://phorion.io/blog/offical-claude-code-vsx-compromise/


Replies

stingraycharles • today at 12:56 PM

And try to launch sshd, right? Think of all the other things they could have done…

➕ show 1 reply
JoBrad • today at 6:13 PM

Except this doesn’t impact VSCode at all, apparently.