The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.

https://phorion.io/blog/offical-claude-code-vsx-compromise/