As attacks grow more sophisticated, the open-source community is racing to close critical security gaps and stop malicious code before it spreads.