https://soatok.blog/2025/01/20/session-round-2/

While it's definitely weird the TS api is littered with any, i at first thought "maybe they're doing interop with a WASM binary and this just made life easier", surprisingly, they are not, which does make this pretty weird.

That being said, the author did not bother to reach out in advance, arguing that responsible disclosure wasn't necessary, which is patently false and definitely made me less empathetic to the fact that they're also being pretty smug in their posts.