Snyk security researcher deploys malicious NPM packages targeting Cursor.com