EU cybersecurity agency says hackers target supplier's code