Malicious Claude Code extension distributed through Cursor marketplace Sophos