Simulating a Real-World Supply Chain Attack on Drupal: MitM and LFI to RCE | Not Hacker News!