Devs Hit by Trojanized Claude Code Extension for Cursor Dark Reading