UpGuard found around 16,000 Supabase databases exposing some degree of personal data, including names, addresses, phone numbers and, in smaller numbers, user passwords and authentication tokens. The research adds to evidence that vibe-coded apps are helping fuel a new wave of breaches caused by basic misconfigurations and improper security. Developers should review how their own projects are configured.
