Agentjacking: Fake error reports hijack Claude Code and Cursor into running code

The root problem is that coding agents treat tool output as trusted context.