Escaped AI Agents Polluted the Web with Self-Replicating Code