Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1.314 replaced it.
More info