Malicious Claude Code Extension Infects Thousands via Cursor Marketplace OECD AI Policy Observatory