Ledger users face a critical security threat as a supply chain attack on ConnectKit exposes vulnerabilities, prompting urgent dApp updates.