Interesting that the article says "DevOps engineer downloaded a tampered Homebrew installation". Are we aware of supply chain attacks against Homebrew? (I guess the internet says the engineer was tricked into downloading a modified version of Homebrew, the official download was not compromised).