These kinds of attacks are particularly pernicious because even small changes can have widespread and damaging effects. A software supply chain attack requires only one compromised application or piece of code to affect the entire supply chain. Attacks often target weaknesses in application source code, which can compromise a trusted application or software system.