How Ledger’s Connect Kit was compromised