A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...
I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).