Java Code Repository Riddled with Hidden Log4j Bugs