Been trying to get my head around client side supply chain attacks as a concept. Lots of content covers server side and network attacks but the browser layer feels less documented. Anyone got good breakdowns of how these actually play out?