An attacker infiltrated the code base of a hardware manufacturer and inserted malware before the code was compiled. The malicious code is now running at the hardware level across a number of…

An SDLC (Software Development Life Cycle) attack is too broad; while this scenario involves the SDLC, "supply chain attack" is a more specific and accurate description of the overall risk from a vendor perspective.

A side-load attack typically refers to installing unauthorized applications onto a device outside of official app stores, which is not what happened here with the compromise occurring before compilation and distribution.

Remote code signing involves signing code, but this choice describes a specific technique rather than the broader category of an attack compromising a vendor's product distributed to many customers.

A supply chain attack occurs when an adversary infiltrates a legitimate software or hardware development process, injecting malicious code or components before the product reaches the end-user. In this case, compromising the hardware manufacturer's code base and distributing malware at the hardware level through their products is a classic example of a sophisticated supply chain attack.