Hackers hijacked a Claude Code extension, exposing yet another new AI security risk Fast Company