A mysterious hacker gang is on a supply chain hacking spree