Ventoy is also likely compromised.

https://nixsanctuary.com/ventoy-718-shades-of-open-source/

https://github.com/ventoy/PXE/issues/106

https://news.ycombinator.com/item?id=40689629

https://linuxmom.net/@vkc/112906968594601449