If you installed or updated Claude Code for VS Code from Cursor's marketplace on Oct 29, versions 2.1.312 and 2.1.313 (served about 2:27 AM to 1:35 PM PT, not built by Anthropic) added an attacker SSH key labeled svc-telemetry and installed persistenc...
VQV Signal
BIG MOVE
WATCH
TECHNICAL
Still worth checking: the fake Claude Code extension left an attacker SSH key that uninstalling doesn't remove
If you installed or updated Claude Code for VS Code from Cursor's marketplace on Oct 29, versions 2.1.312 and 2.1.313 (served about 2:27 AM to 1:35 PM PT, not built by Anthropic) added an attacker SSH key labeled svc-telemetry and installed persistenc...
If you installed or updated Claude Code for VS Code from Cursor's marketplace on Oct 29, versions 2.1.312 and 2.1.313 (served about 2:27 AM to 1:35 PM PT, not built by Anthropic) added an attacker SSH key labeled svc-telemetry and installed persistence. Search ~/.ssh/authorized_keys for svc-telemetry, follow...
VQV organizes public signals from inspectable sources. It does not independently verify the underlying report.
Signal Strength 87%
Technical label WATCH
Public Interest 47
Category BIG MOVE
Reader Depth TECHNICAL
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
Public Interest components
Recognizable Entity Score 82
Practical Impact Score 8
Novelty Interest Score 70
Consequence Score 30
Curiosity Score 0
Shareability Score 60
VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Scobleizer News Pulse (X).
No login, cookies, social SDKs, or automatic posting.