Researchers say prompt injection attacks could manipulate AI coding agents to access sensitive credentials stored in software development pipelines.