"We heard that the supply chain was an area where malware could be introduced." . . . .