Agentjacking: a fake bug report can hijack your AI coding agent