https://vigihq.com/blog Supply chain attacks, what changed, and how to read an update before you trust it.