How to spot software supply chain attacks and stop worms-before it's too late | Not Hacker News!