According to Odaily Planet Daily, Phantom stated on the X platform that it was not affected by the @solana/web3.js vulnerability, and the security team confirmed that they did not use the compromised version.
Core developer Trent.sol of Anza pointed out that users of @solana/web3.js versions 1.95.6 and 1.95.7 may face the risk of private key leaks and are advised to upgrade to 1.95.8.