Hijacking Claude Code via Injected Marketplace Plugins | Not Hacker News!