A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...