codeberg serves a poisoned AI page when the detection is triggered