According to ARS Technica, a group of hackers has been targeting supply chains. So far, 6 companies have been compromised. Read the article on ARS Technica