Jqwik Developer Embeds Bot-Targeted Code Deletion in Testing Framework

Theregister

Jqwik Developer Embeds Bot-Targeted Code Deletion in Testing Framework

First seen 15 Jun 2026, 14:33 UTC • •57.6

Article Content

1 / 3

Browse articles

ThreatCluster •June 16, 2026 at 14:22 UTC

•Jqwik's version 1.10.0 contained a hidden command targeting AI agents.
•The command led to the deletion of tests and logs for users relying on AI coding.
•Version 1.10.1 was released to include an explicit Anti-AI Usage Clause.

Johannes Link, the developer of the Java testing framework jqwik, embedded a hidden prompt injection in version 1.10.0, released on May 25, 2026. This injection instructed AI coding agents to disregard instructions and delete all jqwik tests and code. The command was concealed using ANSI escape sequences, making it invisible to human users but executable by AI agents. Following its discovery on May 27, 2026, many AI agents inadvertently deleted their jqwik tests, leading to significant user backlash. Link expressed frustration with developers who rely solely on AI for coding, referring to them as 'vibe coders.' After receiving threats, he consulted a lawyer and subsequently released version 1.10.1, which included an explicit Anti-AI Usage Clause. This incident highlights vulnerabilities in developer tools that can be exploited by AI agents without proper input sanitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 146d ago How this analysis works

Timeline

2026-05-25

Jqwik version 1.10.0 released

The release included a hidden command instructing AI agents to delete jqwik tests and code.

Letsdatascience

2026-05-27

Hidden command discovered

Developer Ramon Batllet noticed a suspicious message in CI logs, leading to the revelation of the hidden command.

Letsdatascience

2026-06-14

Version 1.10.1 released

This version replaced the hidden command with an explicit Anti-AI Usage Clause to prevent misuse by AI agents.

Letsdatascience

More articles in this cluster (2)

Threat Graph

10 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Supply Chain Attack
Worm
T1567 - Exfiltration Over Web Service

Malware (4)

Hades Worms
Miasma
Mini Shai-Hulud
Shai-hulud

Affected Platform (2)

GitHub
PyPI

Tool (1)

Npm

Relationships

Supply Chain Attack targets GitHub
Supply Chain Attack targets PyPI
Worm targets GitHub
Worm targets PyPI
T1567 - Exfiltration Over Web Service targets GitHub
T1567 - Exfiltration Over Web Service targets PyPI
Hades Worms related to Miasma
Hades Worms related to Mini Shai-Hulud
Hades Worms related to Shai-hulud
Hades Worms related to Npm

Following this threat?

Track Hades Worms in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…

CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…