cloud platform supply-chain attack