Fooling AI Agents: Web-Based Indirect Prompt Injection Observed in the Wild · HackerTrans