Malicious Claude Code extension in Cursor’s marketplace attempted remote access and data theft — Blankdot