A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...

We analyzed llms.txt across 10 websites. Only two saw AI traffic increases — and it wasn't because of the file.