Ssh MITM attack when using tor

[Juliusz Chroboczek]

What are you supposed to do when you notice a MITM attack?  How do you
find out the exit node, and where do you report it to?

I'm running ssh as so:

  ssh -A -C -o 'ProxyCommand socat - SOCKS4A:localhost:%h:%p,socksport=9050' "$@"

                                        Juliusz