Developers using open-source tools face heightened supply-chain risk after the botnet lost all four of its command channels.