Trusted Tool, Malicious Build: What the Trojanized Claude Code Extension Means for Developer Endpoints Morphisec