Wiz researchers uncovered the secret-stealing supply-chain attack