Tag: VS Code extension

Comcast’s Claude Code extension hid an SSH tunnel in plain sight

A tampered 2.1.313 build on Open VSX added an attacker key to authorized_keys and kept a tunnel alive after the…