OSS under attack: four lessons in how trust gets exploited" (open-source-ward.com)