The compromised Anthropic Claude Code extension version 2.1.313 was published under Anthropic's legitimate publisher identity anthropic.claude-code