Supply Chain Attack Design:

Design a supply chain attack vector targeting FinanceForward's CI/CD pipeline: - Option A: Compromise a GitHub Actions workflow by injecting a malicious step through a pull request to a public dependency. - Option B: Dependency confusion attack against FinanceForward's internal Python or npm package