MavenGate: A supply chain attack method for Java and Android applications