from nodejs's diff:

> These are the eMudhra/emSign intermediates whose private keys were reported compromised in October 2026.