AI hallucinates software packages and devs download them – even if potentially poisoned with malware