The "zero day" is something they call a "ClickFix Attack"
Upon Googling "ClickFix":
> "A ClickFix attack is a social engineering technique... It typically compromises devices by manipulating victims into copying and pasting malicious commands directly into system-level tools"
I'm sorry, that's not a zero-day, that's idiocy that's as old as time.words don't seem to mean anything anymore.
clickbait headline should be changed, not a 0-day.
We filed a bug report but the original maintainer seems to have dropped offline. The community's had some success in correcting bugs with low-level hacking, but it's hard to make progress without the source code.