A malicious webpage can hijack the local AI behind NVIDIA NemoClaw and plant hidden instructions in the model.