Comment by joeig

Unfortunately, the keychain that CLI tools included with macOS 27.2 and Xcode use still contains the compromised eMudhra certificates (curl, git, etc.).

You can remove the certificates as explained here: https://support.apple.com/en-us/149555