The "MCP rug pull" - when a tool an AI agent trusted yesterday becomes malicious today