https://www.reversinglabs.com/blog/open-source-malware-sows-havoc-on-supply-chain