They use open router.

I've seen attackers install claude code on compromised servers