Devious hackers have been targeting Supply Chain by sneaking malware into downloads from trusted vendors

https://www.wired.com/story/ccleaner-malware-supply-chain-software-security/