The good news is that not clicking on unknown links avoids it entirely.
Here's what to look out for ...
I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).