Open-source AI models vulnerable to criminal misuse, researchers warn