When Your Open Source Tool Turns to the Dark Side