§ articles

Notes from the workshop.

What actually worked, what it cost, and where it broke — written up while the details are still fresh.

Tagged Supply chain · show all_

05 /security ·

Vibe coding and the poisoned package

Axios, LiteLLM, chalk, TanStack: the packages vibe-coded apps pull in by the hundred are now a favourite way in. Why "it works" is not the same as "it is safe", and what to do about it.

#security#ai#supply chain#custom software#testing read_

Stay updated for the next one.

One email when the next article or the next improvement to this build lands. No list-selling, one click to leave.