Q: What is a supply chain attack (for example, Magecart)?

A: It is an attack where a third-party script or vendor is compromised, and the website unknowingly serves malicious JavaScript that steals customer data (often payment information) through the site.