I've applied the recommended solution for this attack, and I'm confident that we weren't affected. I've disabled custom emoji for the time being as an extra precautionary measure, and am keeping my eye on a suitable rc for the latest security patches