This is known as a supply chain attack, when something you already trust becomes the way attackers get in. Tip: Keep a list ...