Supply chain blunder puts 3CX telephone app users at risk

Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into.

3cx app code code repository electron git malware repository risk source code supply supply chain telephone