The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.

https://phorion.io/blog/offical-claude-code-vsx-compromise/

And try to launch sshd, right? Think of all the other things they could have done…

Not only launch sshd. They set up a reverse tunnel connection.

Except this doesn’t impact VSCode at all, apparently.