A trusted email tool for AI agents shipped a quiet update that BCC'd every message to an attacker. Here's what to do about tools that turn hostile after you approve them.