Password Managers Vulnerable to Vault Compromise Under Malicious Server