Inside a malicious Claude Code-branded extension and its persistent SSH backdoor Microsoft