The Emerging Threat Landscape of LLM-Powered Applications