What are common supply chain attack vectors?

Common supply chain attack vectors include malicious code injected into software updates or build pipelines, compromised hardware components with embedded malware or backdoors, credential theft targeting suppliers with access to customer systems, counterfeit or substandard hardware components, and social engineering of supplier employees. Assess each supplier's exposure to these vectors proportional to their access level.