Software supply chain attacks are not new, but the target has shifted. For years, organizations treated software supply ...