The compromised version was actually v4.0.0 released March 1...

Raw JSON

{
  "kind": 1,
  "id": "079d6d249b6225b5de3a677f4d327d2e04b36956ec67d4aab9e7ac37c1a5f325",
  "pubkey": "0d97beae567fcec9c6574f1c6ef6126ea969d4992c3198e51c0fac52c5274a14",
  "created_at": 1785496583,
  "tags": [
    [
      "e",
      "182cf555599061c03c23a15c5bbc908266441def5a2a345b173cbb852b6d3d0c",
      "wss://relay.primal.net/",
      "root",
      "9650bab82237dc226831a7b5e64ad40180ef71ae78bea1152315576e6bc07247"
    ],
    [
      "p",
      "9650bab82237dc226831a7b5e64ad40180ef71ae78bea1152315576e6bc07247",
      "wss://nostr.messagepush.io/"
    ],
    [
      "client",
      "Amethyst"
    ]
  ],
  "content": "The compromised version was actually v4.0.0 released March 17th 2021. For unknown reason, that version has been lost in their release notes. Likely because 4.0.1 was considered a security patch for 4.0.0\n\nEither way, any firmware version from v4.0.0+ was compromised.",
  "sig": "37306ab05f622a5038fb7228aeada92a35545752a9238353111605e4f984eb77dac22f9b1be611af5970b94269fa5f2a5ec00b5afd1c74ee7d1242002c8701de"
}