Malicious Claude Code Extension Served in Cursor Supply Chain Attack SecurityWeek