Welcome to the Strip Mining Era of OSS Security