In-house software built in March with open-source components may include malware placed there by criminals. This isn’t a ...