Malicious activity within software supply chains has evolved from opportunistic abuse into “sustained, industrialised” ...