Berlin — A Java library shipped hidden AI sabotage code. Coding agents treat dependency files as instructions — so any library a project pulls is now a prompt-injection channel into its AI. Developer
Ars Technica