Hackers Use SEO Poisoning to Impersonate Gemini CLI and Claude Code Installers