They thought they were downloading Claude Code source. They got a nasty dose of malware instead