Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.