Leveraging Code Cohesion Analysis to Identify Source Code Supply Chain Attacks