https://www.buyminershell.com/an-analysis-of-software-supply-chain-attacks-part-two-4/