This is why I’ve recently modified my git forge to return subtly and maliciously buggy code if it detects it is being accessed by an LLM.
I won’t link it, and I won’t do a write up to retain effectiveness, but I have already found at least 3 vibe coded slop projects on GitHub that include my deliberately buggy code verbatim, and it makes me very happy.