A developer opened Postman. Then two AI coding agents changed without their permission. The New Stack