AI coding agents are installing abandoned MCP servers with known security issues | Hacker News Reader