This has nothing to do with anthropic. One (or two) distribution channels were hacked. The hackers decided to distribute their malware through the claude extension, probably because it's popular.