https://itnerd.blog/2023/07/26/first-known-open-source-supply-chain-attacks-target-banks/