New Blind Spot in AI Coding Assistants: Malicious Instruction Files in 'Downloads' Exploited, Credential Leak Demonstrated BigGo Finance