Some top password managers can be hacked and hijacked to change your passwords - here's what we know