OAuth Device Flow Vulnerabilities: Analysis of 2024-2025 Attack Wave