Far-Reaching Third-Party Components Putting OT Networks at Risk