The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.
And try to launch sshd, right? Think of all the other things they could have done…
loading story #50303269
Except this doesn’t impact VSCode at all, apparently.