Researchers find commercial banking apps contain swarms of open-source bugs