Multi-Agent Systems Execute Arbitrary Malicious Code