The popular virtual drive software confirms a 'supply chain security incident' after security vendor Kaspersky warned about malicious versions circulating on the site.