Attacks and malware
What is Supply chain attack?
Compromising a trusted supplier, software update or library so the attack reaches all of that supplier's customers through a channel they already trust.
A supply chain attack compromises something a target already trusts, such as a software vendor, an update server, an open-source package or a managed service provider, and uses it to reach many victims at once.
The victims did nothing wrong: they installed an update or a dependency as normal. That makes supply chain attacks hard to prevent and gives them a large blast radius.