My dear Livewire believers, I need your help. Yesterday, one of my projects was attacked by what I believe were automated bots.

The issue is that the scripts were targeting (among other things) the "livewire/update" route. They were attempting to call methods that clearly don't exist or trying to access properties.

I suspect they might have bypassed the checksum check, but I'm not sure.

Has anyone seen anything like this before?

Btw it is totally possible

Even I can copy component id from snapshot and call any method or property I want with using.

Livewire.find('componentId').call('method', { parameters });