This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and password advice