A trojanized Claude Code extension plants an SSH backdoor: the 7-point audit for your machine

anthropic.claude-code@2.1.313 on Open-VSX carried a 66-line loader that SSH-backdoored your machine the moment VS Code loaded it. The mechanism, every IOC, and a read-only audit script I ran on my own machine tonight: 7 checks, 0 indicators, exit 0. Run yours.