Arthur B.
The desire to have a web-like experience when developing dapps smart contracts and front-ends is as disastrous as it is irrepressible. I'm not sure where we'll land. In the meantime, don't use dependencies and if you must freeze them to a particular version, and only serve them from extremely trusted CDNs.
banteg
🚨 ledger library confirmed compromised and replaced with a drainer. wait out interacting with any dapps till things become clearer. https://cdn.jsdelivr.net/npm/@ledgerhq/connect-kit@1