Prompt injections hidden into rare books, swallowed by the AI machine.