i searched through the logs of my #NextDNS setups for the domain used in the #axios postinstall security issue fully assuming it would come up empty, but it did not 🫨
as this instance is linked to a bunch of #fediverse relays it receives a lot of random posts. and this morning it tried to load the link preview for a post containing said url 🫣
the lock file for #mastodon v4.5.8 also seems to be resolving to an older version






