Going to copy paste my comment from today's other thread[3] that linked to this:

Note also there's a direct response from Persona's security team here[1], and a lot of back and forth from Rick on Twitter[2].

[1]: https://withpersona.com/blog/post-incident-review-source-map...

[2]: https://x.com/Persona_IDV/status/2025048195773198385?s=20

[3]: https://news.ycombinator.com/item?id=47136036