OSS under attack: four lessons in how trust gets exploited"
open-source-ward.com