MCP04:2025 – Software Supply Chain Attacks & Dependency Tampering