Unless it was the software package itself that was compromised.