Claude Code Extension Backdoor: Why Updating Doesn't Remove It
Version 2.1.313 of the Claude Code extension for VS Code and Cursor planted an attacker SSH key and persistence scripts. The fixed update leaves them in place. How to check your machine and clean it up.