Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories