Attackers could have exploited a dependency confusion vulnerability dubbed "CloudImposer" affecting various Google Cloud services to execute a sprawling supply chain attack via just one malicious Python code package.