open source attacks