CloudFlare CDNJS Bugs Can Lead to Widespread Supply-chain Attacks