Software Supply Chain: Backdoors hiding in plain sight