Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...