Fake Claude Code extension in Cursor's store plants a backdoor on up to 5,000 developers' machines https://ochtendkrant.be/en/2026-10-31/cursor-claude-extension-backdoor