Software Supply Chain Attacks: Regulation and Litigation Inc