How AI coding agents could infiltrate and destroy open source software