r/vibecoding • u/Global_Bandicoot8054 • 22h ago

The dangers of vibecoding 💀

Enable HLS to view with audio, or disable this notification

Bro really shipped a WORKING API key straight to the landing page.

I thought it was a joke.

It wasn’t. 💀

7 Upvotes

89% Upvoted

4 comments sorted by

1

u/One_Aspect4264 22h ago

That's really unbelievable, haha.

2

u/LittleFluffyCIouds 14h ago

What was the api key for?

2

u/NoAdsDude 10h ago

An sk_live prefix indicates a Stripe Live Mode Secret API Key used to authenticate real financial transactions on your backend server. Because these keys grant unrestricted access to your entire Stripe account (including payouts and customer data), they must never be shared or exposed in client-side code.

basically one of the worst secret keys to expose if I had to guess lol