🚨 LEDGER UPDATE : With the latest developments, I've updated the list of Ledger resellers and the associated risks. • A Ledger Flex bought from a MetaPod vending machine at Singapore airport has been confirmed infected. MetaPod is an official Ledger reseller, also found in Malaysia and Hong Kong. • Another Ledger Flex bought at Challenger Vivo City Singapore has been found tampered too some minutes ago. 
It was an official reseller that I had flagged as high-risk since the start of the affair. • A device bought from MediaMarkt Saturn has also been confirmed infected. They have just announced they are halting distribution as well. • We are also awaiting results on a device bought from MediaMarkt Trier, Germany, whose supplier was also Aqipa. As a reminder, I have put together a list of resellers that could represent a risk due to their regional proximity to one another. There is therefore a risk that their supply chain has also been compromised, but nothing is confirmed until it is.