【石榴大讲堂】Towards the Propagation and Persistence of Security Threats via the Open Source Software Supply Chain