Researchers cause Gitlab AI developer assistant to turn safe code malicious