A feature being disabled by default could leave users and their organizations vulnerable to commands that run automatically.

The developers built malware before and participated in competitions used as recruiting platforms for Chinese state hackers.