Self-Replicating Prompt Injections Turn Agent Context into an Open Relay

· Dev.to