Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks