AINewsnow

I scanned 200 public vibe-coded apps. Half the Supabase ones expose their database.

This story is from 2026-10-06. It is preserved in the archive; the latest stories are on the live feed.

AI coding tools can ship a full-stack app in an afternoon. I wanted to know what they ship with . So I took 200 public GitHub repos of apps built with Lovable, Bolt, v0 and Supabase + Next.js templates (about 50 of each, all updated in 2025–2026), and ran an offline static security scan on every on…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-06 16:38 · DEV Community — AI
    I scanned 200 public vibe-coded apps. Half the Supabase ones expose their database.

More stories

  1. Introducing Mistral Large 4 — Mistral AI News
  2. Mistral Says Its New AI Model ‘Le Chonk’ Is the Best Open-Weight Offering Outside of China — Wired AI
  3. Trump’s big AI move: ‘Super Intelligence Force’ launched, Jay Clayton named AI czar — Mint AI
  4. Sam Altman to Decoded: ‘The world should accept some bad things happening’ for the benefits of AI — Politico Technology
  5. Introducing GLM 5.3 on Amazon Bedrock — AWS Machine Learning Blog
  6. OpenAI safety leader quits, warning AI company’s culture is ‘broken’ — The Guardian AI
  7. Anthropic expands its Claude Startups program, including up to $45K in discounts and credits via the Claude Startup Stack and a one-time $1,000 API credit (Ashley Capoot/CNBC) — Techmeme
  8. Manage Amazon SageMaker HyperPod Spaces directly from SageMaker Studio — AWS Machine Learning Blog

Get the daily brief of stories like this at 6:30 every morning →