Coding Agent Horror Stories: The Security Crisis Threatening Developer Infrastructure