So is the implication here that any system that allows SSH and contains this malicious code is vulnerable?