reference
Guides
In-depth, plain-language explainers on AI-generated code security — the vulnerability patterns LLMs repeat, supply-chain attacks, secret hygiene, and what scanners can and can't find. Written by the Vibe-Code Audit team.
7 Security Mistakes AI Coders Keep Making
AI code generators repeat the same flaws: SQL injection, XSS, hardcoded secrets, missing auth checks. Learn the patterns and how to catch them before you ship.
read the guide → 2026-10-11Supply-Chain Attacks in the AI-Coding Era
AI assistants hallucinate package names that attackers register. How slopsquatting, typosquatting and dependency confusion work—and how to defend your builds.
read the guide → 2026-10-11Secret Hygiene: Stop API Key Leaks
API keys leak via client-side code, git history, chat logs and AI prompts. Where secrets escape, how to rotate them, and how to build leak-proof habits.
read the guide → 2026-10-11What Code Scanners Can't Find
Scanners catch known patterns fast, but logic bugs and novel attacks need human eyes. An honest guide to the limits of automated security scanning.
read the guide →These guides are informational explainers, not security guarantees. Scan your own code before every deploy.