Millions of AI agents imperiled by critical vulnerability in open source package