Unfortunately, the keychain that CLI tools included with macOS 27.2 and Xcode use still contains the compromised eMudhra certificates (curl, git, etc.).

You can remove the certificates as explained here: https://support.apple.com/en-us/149555