Cursor shuts down extension marketplace after malicious Claude Code puts 5,000 users at risk Firstpost