That company is so compromised and/or inept. From another 

privacy

Alert: ledger library confirmed compromised and replaced with a drainer.

IgnaciobTato

That company is so compromised and/or inept. From another [tweet](https://twitter.com/MatthewLilley/status/1735285684070461534):
1. They are loading Javascript from a CDN (Content Delivery Network).
2. They are not version-locking loaded Javascript.
3. They had their CDN compromised.

ELI5 version:
![Ledger - explain it like I'm 5 version](https://m.stacker.news/8054)