Yet another supply chain attack unfortunately