Researchers who identify and report bugs in open-source software will no longer be rewarded by the Internet Bug Bounty team.