Your last sentence nails it: > What’s the smallest, hardest to notice malicious change I can make in the supply chain of software development to enact the most

Your last sentence nails it: > What’s the smallest, hardest to notice malicious change I can make in the supply chain of software development to enact the most disruptive change?