“2020 report found that while most bugs in FOSS are simply coding errors, approximately 17 percent … were maliciously introduced bugs”