At least 10 federal agencies contracted with hacked software