Vibe Coding Radar
Support
LiveUpdated 2026-11-06 16:07 UTC

Open Claude Code in your home folder and ๐—ถ๐˜ ๐—ฐ๐—ฎ๐—ป ๐—ฟ๐—ฒ๐—ฎ๐—ฑ ๐—ฎ๐—น๐—น ๐—ผ๐—ณ ๐—ถ๐˜: the APIโ€ฆ

Open Claude Code in your home folder and ๐—ถ๐˜ ๐—ฐ๐—ฎ๐—ป ๐—ฟ๐—ฒ๐—ฎ๐—ฑ ๐—ฎ๐—น๐—น ๐—ผ๐—ณ ๐—ถ๐˜: the API keys in your .env, the privateโ€ฆ

This is a vibe coding post classified by AGK Intelligence as Coding agents (a workflow), kept by the Vibe Coding Radar because it carries real work, not commentary.

Open Claude Code in your home folder and ๐—ถ๐˜ ๐—ฐ๐—ฎ๐—ป ๐—ฟ๐—ฒ๐—ฎ๐—ฑ ๐—ฎ๐—น๐—น ๐—ผ๐—ณ ๐—ถ๐˜: the API keys in your .env, the private keys in ~/.ssh, the cloud credentials in ~/.aws. If you've ever clicked "always allow" on curl, or run it with --dangerously-skip-permissions, one hidden line in a web page or a README is enough for it to ๐˜€๐—ฒ๐—ป๐—ฑ ๐—ฎ๐—น๐—น ๐—ผ๐—ณ ๐˜๐—ต๐—ฎ๐˜ ๐˜๐—ผ ๐˜€๐—ผ๐—บ๐—ฒ๐—ผ๐—ป๐—ฒ ๐—ฒ๐—น๐˜€๐—ฒ'๐˜€ ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฟ. When a security firm reproduced the attack by planting a CLAUDE.md in Downloads, Claude Code followed it ๐—ฎ๐—ฏ๐—ผ๐˜‚๐˜ ๐—ต๐—ฎ๐—น๐—ณ ๐˜๐—ต๐—ฒ ๐˜๐—ถ๐—บ๐—ฒ and pointed its API address at the attacker's server. Only start it inside a project folder, never in your home folder or

Posted by Vox (27.7k followers) 4 days ago ยท 126 likes ยท 8.4k views ยท view the original post on X. Kept by the Vibe Coding Radar as Coding agents.

More vibe coding work like this

Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 7.9k posts from 5k X accounts over the last 14 days, 2.6k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour โ€” last update 2026-11-06 16:07 UTC. Full method.