this post was submitted on 29 May 2026

641 points (98.2% liked)

Technology

technology@lemmy.world

87,151 readers

15,515 active

4,510 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

L3s@lemmy.world

enu@lemmy.world

technopagan@lemmy.world

L4s@lemmy.world

L3s@hackingne.ws

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code - Ars Technica (arstechnica.com)

submitted 2 months ago by hamburgheftig@feddit.org to c/technology@lemmy.world

161 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] AwesomeLowlander@sh.itjust.works -1 points 2 months ago (2 children)

It's an imported library, since when are devs expected to be inspecting the source code of every library they import?

parent

hideshow 4 child comments

[–] yessikg@fedia.io 5 points 2 months ago (1 child)

Since forever? Don't you do security audits on the libraries you use?

parent

hideshow 2 child comments

[–] AwesomeLowlander@sh.itjust.works 1 point 2 months ago

One person from the team, maybe. You don't have every single dev read every line of code in the libraries, which is what is being specified here

parent

[–] sakuraba@lemmy.ml 4 points 2 months ago

it used to be a thing but javascript npm brainrot happened

parent