Supply Chain Compromise Leads to Trojanized Installers