While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...
mask function passed to Langfuse(mask=...) is blocking an async event loop running on main thread. Effectivelly blocking the whole backend in our case. This is serious blocker. This started happening ...
SESEmailService.send_email is declared async but calls the sync boto3.client(...).send_email directly (services/email.py:17-50). That blocks the FastAPI/Granian loop during magic-link login spikes and ...