Cosmos may hold critical vulnerabilities, carries code injections by North Korean hackers