An adversary uses their privileged position within an authorized development organization to inject malicious logic into a codebase or product.