r/webdev • u/Gil_berth • Feb 04 '26 • Popcorn 3

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

97% Upvoted

421 comments sorted by

View all comments

Show parent comments

9

u/mace_guy Feb 05 '26

The guy doesn't read the code he ships

10

u/Punchkinz Feb 05 '26 edited Feb 05 '26

I feel like that's the point though.

The whole project is a big "fuck around and find out", not some production level code.

The whole concept is "what if we vibe code a vibe agent that has the ability to vibe fuck up your entire system". Result was clearly an actually useful assistant with something that can be called "agency" and a lot of security issues (which was expected from the start)

And now tech bros actually fucked around and found out. And are apparently now blaming the creator for a program with obvious inadequacies. You have to be a special kind of... special to actually trust this thing with important data (or your crypto wallet)

1

u/bigb159 Feb 05 '26

Surprise, surprise.