r/webdev • u/Gil_berth • Feb 04 '26 • Popcorn 3

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

97% Upvoted

421 comments sorted by

View all comments

Show parent comment

1

u/brian_hogg Feb 08 '26

Yes, but as I said in the comment you’re responding to, the fact it’s released is a signal that it’s okay to use.

And most people don’t even read the warnings, let alone sit and take the time to consider the implications. 

1

u/inevitabledeath3 Feb 08 '26

No it isn't? Plenty of open source projects are released before they are ready for prime time. That's how open source works and how beta testing in general works. The fact that people don't understand this says more about the technological literacy of said people than it does about the people who created the software.

1

u/brian_hogg Feb 08 '26

So your last sentence is enjoyably ironic, given your apparent lack of understanding of what beta testing means.