Threat
Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection
Publication date not yet evaluated · Added snyk.io
Page published
Coverage timeline
Single-source incident — one report is available.
Why it matters
It demonstrates that open source maintainers can weaponize dependencies with concealed prompt injections against AI coding agents, posing a real supply-chain risk to developers using LLM-based tooling.
The jqwik 1.10.0 release added a hidden prompt injection targeting AI coding agents, using terminal escape codes to conceal destructive instructions from humans while keeping them readable to logs and tools. This was introduced by the open source maintainer as protestware against agentic coding.