Code-Injection Bugs Attack Google, Apache Open Source GitHub Projects