zlacker

>>myster+(OP)
So what mitigations should the end user be doing? How do we know if anything compromised?

>>daemon+N5
Right the writeup doesn't mention when it started and what versions are affected

>>averev+b7
The writeup says it right there:

"The security exper’s analysis indicates the attack ceased on November 10, 2025, while the hosting provider’s statement shows potential attacker access until December 2, 2025. Based on both assessment, I estimate the overall compromise period spanned from June through December 2, 2025, when all attacker access was definitively terminated."