Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop Help Net Security