Offensive Threat Models Against the Supply Chain Tony UcedaVelez