The difference is intent. If someone makes a mistake, even if deleting all their code, that's a bug. If they intentionally make a change with no other purpose than breaking your stuff, that's an attack. The scale and whether they're successful doesn't matter.

    > attack (plural attacks)
    > An attempt to cause damage, injury to, or death of opponent or enemy.