Software supply chain attacks could increase by using this newly discovered tactic, say JFrog researchers