AI threats in the wild: The current state of prompt injections on the web