The Fragility: Supply Chain Security in Open Source (RubyGems, NPM, PyPI)