Web-Based Indirect Prompt Injection Observed in the Wild (Web Pulse, 2026)