Your Agent Has Gone Rogue: Dissecting Emerging Attacks Against DevSecOps AI Tools