Hackers are flooding open source repositories with malware designed to steal secrets, hijack cloud accounts, and quietly infiltrate the software supply chain.