Contractors sent images including pills, knives, nooses. Prompts designed to push safety refusals. Companies behind chatbots unaware of testing.