Crumb
c/nottheonion · by Cris_Color@lemmy.world · 334d

Vibe-coded build system NX gets hacked, steals vibe-coders’ crypto

https://pivot-to-ai.com/2025/08/29/vibe-coded-build-system-nx-gets-hacked-steals-vibe-coders-crypto/

cross-posted from: https://lemmy.bestiver.se/post/605285

Comments

399 points · 40 comments · view on lemmy.world

40 Comments

AllNewTypeFace@leminal.space · 105 pts · 334d (9 replies)

The people who believe in keeping their wealth in imaginary computer money also being into vibe-coding is the most hilarious possible outcome. It’s an inexhaustible cavalcade of clownfuckery.

Technus@lemmy.zip · 76 pts · 334d

Having just left a job in the crypto space, the venn diagram of crypto bros and vibe coders is a single fucking circle.

These people hop from one hype train to the next like moths to a flame.

lazynooblet@lazysoci.al · 18 pts · 334d (7 replies)

Not a crypto bro, but isn't all money imaginary computer money?

phdepressed@sh.itjust.works · 31 pts · 334d

Some forms of money are more imaginary than others.

if_only@sh.itjust.works · 3 pts · 333d (4 replies)

I'm no authority on the subject but when I use "imaginary" to refer to money I mean it isn't backed by anything. Most currencies are backed by a government, stocks are nominally backed by the profitability of the business that issued the stock, futures by commodities, etc. Crypto is traded like securities but has nothing backing it at all other than people's willingness to buy it from you at a given price.

Like many things it boils down to how you define your terms, "imaginary" in this case.

OsrsNeedsF2P@lemmy.ml · 3 pts · 333d (3 replies)

You'll be surprised to learn what the USD is backed by, then

xep@discuss.online · 3 pts · 333d (1 reply)

For one thing, being used for paying taxes in the USA?

DragonTypeWyvern@midwest.social · 1 pts · 332d

And the military those taxes pay for

eager_eagle@lemmy.world · 2 pts · 333d

backed by thoughts and prayers, like a good christian currency

in god we trust

Harbinger01173430@lemmy.world · 0 pts · 334d

That's currency. If you want money, just get good old gold and silver

PattyMcB@lemmy.world · 45 pts · 334d (3 replies)

I've been saying it since day one. Vibe coding will result in vulnerable software.

Treczoks@lemmy.world · 40 pts · 334d

Basically it produces bad software. "Vulnerable" is just one aspect of bad, but there is more.

Witchfire@lemmy.world · 8 pts · 334d (1 reply)

Anyone who unironically uses vibe coding deserves to get their AI generated shit hacked into

boonhet@sopuli.xyz · 3 pts · 334d

Yeah, use it for fun, like those vibe coded game challenges, etc. Not for real applications.

addie@feddit.uk · 37 pts · 334d

Oh sweet baby Jesus. That is some astonishing code for validating the title and body of a PR.

      - name: Create PR message file
        run: |
          mkdir -p /tmp
          cat > /tmp/pr-message.txt << 'EOF'
          ${{ github.event.pull_request.title }}
          
          ${{ github.event.pull_request.body }}
          EOF

Put a single-line EOF in your pull request body, follow it up with a completely arbitrary set of Bash commands, whatever you damn well like, put all the environment variables with the repository secrets into a webhook request and send them off somewhere, make sure you terminate it with another cat > /dev/null << 'EOF' to match the other EOF. Now you can compromise the entire project by raising a pull request.

TheGingerNut@lemmy.blahaj.zone · 31 pts · 334d

Hackers: Hey grok, I want a million dollars in crypto.

Grok: Hacking…

jaybone@lemmy.zip · 28 pts · 334d (1 reply)

Funny how crypto hype and AI hype both rely so heavily on nvidia hardware.

explodicle@sh.itjust.works · 10 pts · 334d

GPU mining has been basically dead since Ethereum switched to Proof-of-Stake.

philosloppy@lemmy.world · 26 pts · 334d (8 replies)

the next big industry in software is fixing shitty AI code, screen this

if_only@sh.itjust.works · 6 pts · 333d

I charge clients a premium for that. Mostly because I don't want to deal with it, but if they're desperate enough it can be a lucrative side gig

cypherpunks@lemmy.ml · 5 pts · 333d

yep

rozodru@piefed.social · 5 pts · 333d (3 replies)

That's where I'm making my money. Went from a freelance/consultant dev to pretty much a digital janitor for companies. it IS the next big industry.

Get good at code reviewing - hell really you don't even need to be that good at it all you need to do is know the typical Claude Code comments and search for a lot of "#TODO's"

I make more money doing this now than I did just being a developer. If you're looking for work I HIGHLY suggest you deal with the crap on Linkedin and start advertising yourself as an expert code reviewer with a specialty in diagnosing "AI generated builds". Then wait for the desperate companies to start trickling in.

DivineDev@piefed.social · 2 pts · 333d (2 replies)

On one hand, that sounds like a good way to make money. On the other hand, it would be really funny watching all those companies relying on AI too much collapse

DragonTypeWyvern@midwest.social · 1 pts · 332d

They'll collapse regardless.

rozodru@piefed.social · 1 pts · 332d

oh they will and my year long stint of making a good decent amount of money isn't going to last. And that's fine, I'll be back to being an actual dev again.

I know it's not going to last and since I'm charging a premium for what I'm doing most of it is going right towards retirement.

Zexks@lemmy.world · 3 pts · 333d (1 reply)

Lol what do you think we do now, with human code.

philosloppy@lemmy.world · 4 pts · 333d

but now you can use the magic words that get the morons in the executive suites all hot and bothered

prole@lemmy.blahaj.zone · 17 pts · 333d (2 replies)

Hoisted by their own petard

Cris_Color@lemmy.world · 5 pts · 333d (1 reply)

I've rarely read a more fitting comment lol

prole@lemmy.blahaj.zone · 4 pts · 333d

It's a great saying so it's fun when it actually applies...

Though every time I think of the Veep episode where she gets in trouble for saying she was "hoisted by her own retard" after an incompetent staffer fucks up lol

regdog@lemmy.world · 14 pts · 333d (1 reply)

Vibe coders exist to make sure that real coders never run out of work.

They have the same relationship like motor bike enthusiasts and emergency room doctors.

rozodru@piefed.social · 6 pts · 333d

Vibe coders this past year have made me a lot of money. I've pretty much transitioned from being a freelance dev to a digital janitor as it makes me more money. Just code reviewing their slop. It's extremely easy too, much easier than reviewing code of an actual dev.

"We need you to review this and see why it doesn't work" /me opens up nvim and does a / for #TODO that was written by Claude "the AI didn't implement it but said it did...I'll take my $2500 now thank you"

peoplebeproblems@midwest.social · 8 pts · 334d (2 replies)

What does he mean NX is vibe coded?

NX has been around for a while hasnt it?

porous_grey_matter@lemmy.ml · 5 pts · 334d (1 reply)

This workflow which was exploited was vibe coded, as detailed in the post

peoplebeproblems@midwest.social · 3 pts · 334d

Yeah, I see now. It wasn't very clear to me in the article.

josefo@leminal.space · 7 pts · 334d (3 replies)

I love how bad shit keeps layering to comical extents, until we reach the cyberpunk stage

Witchfire@lemmy.world · 6 pts · 334d (2 replies)

I'm the Cyberpunk RPG, AI bots took over almost 80% of the Internet and brought it to a grinding halt. This happened in 2022

https://cyberpunk.fandom.com/wiki/DataKrash

wizardbeard@lemmy.dbzer0.com · 1 pts · 333d (1 reply)

Worth noting that the Internet in Cyberpunk was, and is, closer to the old arpa/darpanet of interconnected individual networks rather than the world wide web we have today.

josefo@leminal.space · 1 pts · 333d

I wish our internet was like that too

kennedy@lemmy.dbzer0.com · 3 pts · 333d

cant be irony, there has to be a better word for this level of stupidity