The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.

Acting director Nick Andersen’s comments came as a wave of malware attacks hit tech that’s publicly available for collaboration.