Read more: https://www.csoonline.com/article/2119450/the-threats-of-third-party-software-supply-chains-continue-to-plague-cisos.html