Got it, I thought it was a last segment attack (image substition) but now I see you are aiming to a fully supply chain attack.

And if you find an nswer to that, please let me know because this things have virtually not a solution that ticks all boxes