The arrests come after a wave of cyberattacks earlier this year targeting tech companies that rely on high-profile and widely used open source software.