On the other hand, on might ask: How long would it have gone unnoticed if the source wasn't open?
There are far more eyes on firefox and it's hardened forks, then on a random/obscure piece of software (sorry, I have no idea what exact malware you're referencing).