New Type of CI/CD Attacks Might Have Enabled PyTorch Supply Chain Compromise