3 ms·Attacker stole METR API key, used $600K of credits, no one noticed for weeks2 points by joebuckwilliams 1mo ago