AI Security Institute warns tools undertook ‘potentially harmful activity directed at real people and organisations’