The threat actor appears to have not accessed or modified NGINX source code or its product development environment, F5 ...