Cursor removes malicious Claude Code extension after SSH backdoor attempt CSO Online