Attackers could exploit a common AI experience — false recommendations — to spread malicious code via developers that use ChatGPT to create software.