Malicious Claude Code extension on Cursor planted SSH backdoors BleepingComputer