AutoJack – A Single Web Page Can Hijack Your AI Agent to Execute Malicious Code