US cloud security firm is the latest victim of a wide-ranging supply chain attack campaign targeting marketing software-as-a-service platform.