Cursor says up to 5,000 users affected by tampered Claude Code extension Reuters