Recap of the Lemmy XSS incident & steps for mitigation - LemmyWorld ( lemmy.world )
The attack involves stolen cookies. Any Lemmy instance with any custom emojis is vulnerable to this attack. If you run a Lemmy instance, there are steps inside to protect your instance, and some legal details if your instance was impacted.