Seems like the internal Avast network was _compromised_, but not the products itself.