AI coding agents installing untrusted code