GitLab catches MongoDB Go module supply chain attack