How did hackers get acess to inject a backdoor to solarwinds orion?

Was it spearphishing? I'm reading articles for an informative essay but they all gloss over how exactly the hackers gained acess and skip to saying they were able to inject a backdoor in the source code. Am I missing something?

acess articles backdoor code cybersecurity hackers informative inject missing orion solarwinds solarwinds orion source code spearphishing