Claude Code extension poisoned with persistent SSH backdoor Help Net Security