When Open Source Is Weaponized: Analysis of a Trojanized 7‑Zip Installer Darktrace