A US study uncovered adversarial software components inside apps marketed to the US military. Similar risks and lessons apply to Australian enterprises reliant on shadow supply chains.