OPEN SOURCE 2 The State of Trusted Open Source Jan 8, 2026 Threat actor Banana Squad exploits GitHub repos in new campaign Jun 18, 2025