26 LLM routers are “secretly injecting malicious tool calls and stealing creds,” warns researcher Chaofan Shou.