For all dApps on @Web3Auth connectors/SDKs, this supply chain attack does not affect your deployments.
However, if you’re using Web3auth with external wallet aggregators, do check your deployment for the ledger package.
Read more on this tweet:
https://twitter.com/zenzhenyu/status/1735292746498466294?t=QpWgDGrWRWvw8imyhvQbcw