A bug in Claude Code Desktop's preview pane can allow adversaries to steal credentials from developers, undetected.