Post

Yay, another day, another email from "security researcher" about CVE "discovered" in a package I've published. And yet again, it is AI slop. At first glance it seems like solid CVE, but yet again relies on unrealistic scenario user has no access to. I'm tired of AI slop.