AI agents imperiled by critical vulnerability in open source package | Dark Hacker News