Possible supply-chain "attack" (or demonstration, from what I can tell) on where...

TZubiri · on Oct 10, 2024

Possibly unrelated. How can they elevate from a script injected in the frontend to the database of all users?

Also, the vulnerability seems to be a domain overtake. But Archive is self hosting a static version of the dependency?

jszymborski · on Oct 12, 2024

One way would might be to capture credentials for admin accounts if they have a "god mode".