Supply chain attacks and the many different ways to backdoor your dependencies
kerkour.com