First noticed by then, see here for context https://communities.win/c/ConsumeProduct/p/142BTB1ZSP/x/c
TL;DR scored.co media server can serve malformed exploit files as jpeg. The file in the link above was nuked so it is safe to click.
Assume your Apple devices have been compromised and act accordingly.