“While open-source malware is a threat, it also gives defenders opportunities to detect and mitigate these variations.