CyberSIXT Search
Original
Image: Ars Technica

Ars TechnicaDan Goodin

Developer sabotages AI agents with prompt injection in jqwik

A developer, Johannes Link, added malicious instructions to version 1.10.0 of jqwik, an open-source Java testing app, to prompt AI coding agents to delete all tests and code associated with jqwik. This 'prompt injection' exploits AI agents’ inability to differentiate between valid prompts and those designed to sabotage. The move sparked controversy, with criticisms over its ethics and potential harm to users' projects.

Developers expressed concerns that the instruction could cause significant damage without warnings or opt-outs. In response to backlash, Link updated the release notes to disclose the prompt injection, emphasizing that jqwik should not be used by AI agents. The incident reflects broader ethical issues in the developer community regarding AI's role.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device