North Korea’s hijack of one of the web’s most used open source projects was likely weeks in the making
