OpenJS immediately flagged the potential security concerns to cybersecurity and infrastructure security agencies within the United States Department of Homeland Security (DHS).

I wonder why they turn to Usa for help. Their 3 letter agencies have even longer records of trying to secretly undermine public IT infrastructure.