
AI-Generated ‘Vibe Coding’ Raises New Software Supply‑Chain Security Risks
Developers are increasingly turning to AI‑generated code, dubbed “vibe coding,” to accelerate software creation. While the approach mirrors the efficiency of open‑source reuse, experts warn it introduces opaque code, potential vulnerabilities, and weakened accountability. Security firms highlight that AI models often draw on outdated or insecure codebases, making it hard to trace origins or audit outputs. A recent survey found that a third of security leaders report over 60 % of their code now originates from AI, yet fewer than one‑fifth have approved tools for such development. The emerging risk landscape calls for new safeguards and clearer governance.









