A jqwik 1.10.0 protestware incident embeds stdout commands aimed at coding agents, illustrating a new supply-chain risk vector with regulatory/compliance signals and ecosystem implications.