RE: https://infosec.exchange/@jerry/117495892499185751
Re-upping a warning from yesterday: a non-insignificant number of vibe-coded "apps" use node under the hood and not all are in SasS places like Vercel. The true vibe-coders don't know a thing abt "version pinning" or how to even update Docker configs on their own and the agents won't even attempt "security" if you aren't very specific. So tons of internal and likely some external apps are very likely vulnerable in your org.
DM for free suggestions for finding them (no sales pitch).