my (non technical boss) proudly declared they had “vibe coded a new landing page for our contact us page”

when you hit the submit button it downloaded the .ico of the website to the temp files and nothing else.

Perfect for a malicious code injection!