Russian hackers exploited a Google flaw the company has refused to fix

The account cramforce has locked comments on the github page reporting this bug

https://github.com/ampproject/amphtml/issues/6210