I’m harvesting credit card numbers and passwords from your site. Here’s how.

https://hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5
The weakness of opensource. It's too easy to pull in unaudited programs.