Cybercriminals abandoned traditional, high-friction attack vectors in favor of targeting the core pillars of modern business operations: open-source developers.