I scanned 978 vibe-coded apps. 1 in 26 ships a secret API key to every visitor.

A few weeks ago I found an image-generation API key sitting in my own app's JavaScript bundle. Anyone...