Replit says it patched base images and tooling, added firewall rules, and is notifying customers who need to republish Node.js, Python, and PHP apps.