Agentic coding tools vulnerable to command execution via DNS records ...