Home Music and Digital Media Ars Technica Backdoor in public repository used new form of attack to target big firms