Cookie thieves caught stealing dev secrets via fake Claude Code installers The Register