Their artifactory is both a package cache and CVE scanner.

The package cache is allowed to download packages directly from npm but other systems in that network won't be able to.

Basically the LLMs hacked the bastion host.