LLMs and MCPs have been hijacked at scale and the unauthorized access sold for profit in Operation Bizarre Bazaar.