I heard that some users got a weird dm with an image attachment link ( maybe link identifier included npub?) that then mapped IP downloading the image.

This is what I read on some user's note (will try and find the note _ attach)