self-check you are not impacted

grep -qs svc-telemetry ~/.ssh/authorized_keys && echo "svc-telemetry key found" || echo "No key found; machine not impacted"

$files = "$HOME\.ssh\authorized_keys", "C:\ProgramData\ssh\administrators_authorized_keys" | Where-Object { Test-Path $_ }
if ($files -and (Select-String svc-telemetry $files)) { "svc-telemetry key found" } else { "No key found; machine not impacted" }

>>110201986
>you should google if has been compromised?
Have you not seen the numerous news articles about Google Search results being compromised? Like you Google "VS Code" and the first result directs you to vs-code-site.malware.com
Google makes a disturbingly sizable chunk of their money catering to scammers so it's not gonna get fixed anytime soon either

>>110202019
i did not know, been using adblocks for decade now, dont know about the normal internet but thats a good point

https://www.virustotal.com/gui/ip-address/134.209.82.225/details

c2 seems to be down

Ant say only Cursor users are affected
https://news.ycombinator.com/item?id=50304129

>>110201986
nobody uses vsslop

>>110201986
People still use VS Code? Seriously?

>>110201986
Already confirmed to be only 5k actual infections (Cursor only), they shut it down after.

>>110204304
somehow in 2006 it's good to use electron webshit text editors consuming half of your ram

>>110201986
What if RSS is compromised?

>>110204364
No one should use electron webshit text editors in 2006 or 2026.