We Hacked a Software Supply Chain for $50K