I'm Worried About a Prompt Injection Worm

I think one form the first big AI hack could take is a prompt injection worm. Open source models reach or surpass GPT 6 or FABLE 5 by the final months of 2026 or the early months of 2027. Some threat actor (private or government) has been building target lists for months or years in the form of input-parsing attack surfaces, e.g., email addresses, web forms, Telegram, whatever.