_My_ supply chain is not a big deal, lol. But this is HTTPX. A network library that has a considerable number of users.
When I say _considerable_, I'm essentially saying _nearly every_ big tech. The one I can tell for sure is OpenAI (not a fan of them though).
Remember xz attack?