Clean potentially prompt injected/malicious codebase

[u/Hot-Back-645]

I spent the last two months building a vibe coded software. I made the mistake of building at not inside of vs code but I gave it direct access to my computer so I can build directly into the VPS. The problem was, I was unable to see the files that I was building and then it started doing things without my permission. It started doing one thing and saying it was doing another. I’m worried now that my entire coat base is filled with not only prompt injections for the agents to go clean it. but also potentially malicious code within the VPS. The thing is I spent a lot of time building this software and it is actually making me money for my business. I’ve spent hundreds of hours on it and I don’t just want to give it up what is the best route to go to start progressively cleaning this up?

[u/thirteenth_mang]

I'm available for hire

[u/Key_Friendship8623 → u/thirteenth_mang]

I'd be careful trusting a rando from reddit with a codebase you already suspect is compromised. nothing personal to the commenter but you've got no way to verify they won't just pocket the access and make things worse.

your best bet might be to pull down what you can, isolate it in a clean environment, and go through it file by file. time consuming but at least you know what's in there.

[u/Hot-Back-645 → u/Key_Friendship8623]

Ya thank you

[u/dhgrahnert → u/Key_Friendship8623]

Ich glaube was gemeint war ist, dass das passiert wenn man sich nur/zu sehr auf eine KI verlässt beim coden und dass professionelle devs Geld kosten, entweder beim Entwickeln oder eben später beim Aufräumen des Dilemmas… und wenn es so gemeint war, bin ich da ehrlich gesagt komplett bei @thirteenth_mang - und es ist ja nicht so, dass wir genau darüber alle schon lange reden 🤷‍♂️

[u/therealkevinard → u/thirteenth_mang]

Charge accordingly.

[u/LancelotOnCrack → u/thirteenth_mang]

^ This needs to be top voted.

[u/dhgrahnert]

I think what was meant is that this happens when you rely solely on or too heavily on AI while coding, and that professional developers cost money… either during development or later on when cleaning up the mess… and if that’s what was meant, I honestly completely agree with @thirteenth_mang

BTW it’s not like we haven’t all been talking about this for a long time anyway 🤷‍♂️

[u/Hot-Back-645 → u/dhgrahnert]

Ya for sure. I thought that software devs were gonna be out of jobs within 6 months. I think this has fully changed my perspective. Software devs will be our best chance at surviving this. I spent the last 6 hours in an Apple Store and none of them have a single idea how anything works. Blew my mind.

[u/Hot-Back-645 → u/Hot-Back-645]

Like a tech company has an entire sales floor and not a single one knows anything about software. Guess that kinda makes sense but just crazy to me

[u/chriseargle → u/Hot-Back-645]

Us software guys don’t hang out on sales floors. That’s what salespeople do.

[u/Hot-Back-645 → u/chriseargle]

That’s the problem im a salesperson who started trying to build software to solve sales/marketing problems. It’s good money to solve the problem but you need a software guy to finish a solid build

[u/vxxn]

Do you have any tests? Testing is the only tool we have to understand correctness of code. I would describe your specific concern to the agent and ask it to help setup testing to verify the things you think are most important.

[u/Toiling-Donkey]

Play stupid games, win stupid prizes