The large-scale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights.