AI coding agents are installing abandoned MCP servers with known security issues