Picture this.It is a Tuesday morning. Your team’s CI pipeline runs as normal. Tests pass. Build succeeds. Code ships to production. Nothing looks wrong.But somewhere in that build, tucked inside a package your app has depended on for years, a tiny script quietly ran. It read your environment variables. It copied your cloud credentials. It sent...