Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…