Hijacking Claude Code via Injected Marketplace Plugins | Heykuki News