A new type of supply-chain attack with serious consequences is flourishing