Social engineering takeovers of open source projects