wow, this is a big one. another supply chain attack - security teams better be on high alert.