https://checkmarx.com/blog/evolution-of-a-software-supply-chain-attacker/