Numerous orgs hacked after installing weaponized open source apps

I think a more accurate title would be "Numerous organizations succumb to social engineering and unknowingly install compromised open source apps". "Hacked", to me, indicates that someone has compromised an insecure and poorly installed service or exploited some bug in the software.