Malicious downloads can trick AI coding agents into compromising themselves CSO Online