Researchers Discover Supply Chain Attack Targeting GitLab CI Pipelines