‘AI package hallucination’ can spread malicious code into developer environments