If they were just saying that there were BIOS alterations, code injection, something soft, I have no trouble accepting that as a credible threat. It's feasibl

If they were just saying that there were BIOS alterations, code injection, something soft, I have no trouble accepting that as a credible threat. It's feasible, and probably quite hard to detect. But they made fairly specific claims that named companies had discovered extra/altered chips on their boards. So they are saying someone has the mobos, Supermicro has the BOM. Is this part on the BOM? Where did we buy this part from? This is a resistor package, why is there an IC inside? Altered firmware/software would be an admitted beast to wrestle. But the easiest work of all these should be to find the funky part in boards.