Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft