Cursor urges credential resets after malicious Claude Code marketplace update CryptoSlate