PDF Version: Understanding-Software-Supply-Chain-Attacks