It's not a "supply chain attack" when you wantonly deploy unreviewed code on your server. We don't need a fancy term for it. It is just jackass behavior.