Snorre Fagerland of NorForge discovered about two dozen instances of the open-source platform Cairn being used for malicious activity around October 2, 2026