Repo-Jacking Anthropic's Claude Community Plugins (and the SHAs That Saved Them)