Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI