When the Vibes Are Off: The Security Risks of AI-Generated Code