A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.