Another supply chain attack vector. Always verify source integrity ;)