Which type of attack targets vulnerabilities in the software supply chain?

$1.$ Code injection attack

$2.$ Denial$-$of$-$service $($DoS$)$ attack

$3.$ Man$-$in$-$the$-$middle $($MITM$)$ attack

$4.$ Supply chain attack