Supply chain attacks don't wait for CVEs
mendral.com