Security researchers found that trusted instruction files can be abused to install malware, redirect API traffic, and weaken built-in safeguards in popular coding assistants.