These are horrible large-scale attacks. The perpetrator knows that a particular Ledger library is being used widely across many sites, so I believe this is a carefully planned and executed attack.

This incident also shows what lacking in the altcoin/token spaces, specifically, things that mentioned themselves as "decentralized platform". A truly decentralized platform should not rely on single and centralized library CDNs. On another hand, this proves that security measure is lacking among many applications.