The $149 Dune keyboard can be a meeting controller at least and a script-executing keypad at best.
Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.