Lovable — VibeScamming prompt-injection backdoor

Guardio Labs disclosed a prompt-injection chain that tricked Lovable's AI into generating backdoored code. Attackers could supply crafted prompts that resulted in compromised apps shipping to production.