Attackers are actively targeting software vendors in order to inject malware, giving them backdoors into networks and systems of the vendor’s entire customer base. This is known as a supply chain attack. 

If you produce software of any kind, it’s critical to ensure that the software you are producing and distributing is secure and free of vulnerabilities.