Seems like the connect-kit package has been compromised which is a common connector on various frontends.

14 Dec 2023, 12:52
Seems like the connect-kit package has been compromised which is a common connector on various frontends. All dApps should remove any ledger connections in the meantime like sushiswap (the first dapp affected) did here: