TRUSTED VENDOR
POISONED
A security vendor's own code got
weaponized.