Shai Hulud launches second supply-chain attack