The @SocketSecurity folks have quickly fixed this one:

https://bsky.app/profile/socket.dev/post/3ll5dewnrx22b