Thankfully modern browsers use Certificate Transparency, and there's no indication that any compromised certs were actually used publicly.

However, there are many devices that use TLS which are not browsers, and those devices could in theory be selectively targeted with an evil cert without alerting the public CT servers.