This was API key and first-party usage via claude cli. They reverted quickly.

→ View original post on X — @steipete