It's handled in small private codebases. Secrecy is a necessary component in this effort, because the attackers can just change their shape to evade our abuse detectors if they could read the code.