Ledger JS library poisoned to steal $650K+ from wallets • The Register

https://go.theregister.com/feed/www.theregister.com/2023/12/16/ledger_crypto_conect_kit/