Software Supply Chain Attack Definition