A software supply chain attack is a type of cyber attack. It is an attack on any part of the software supply chain, which can be categorized as all of the dependencies that a piece of software has which are outside of its immediate control.