Yes they could and they wouldn't need opensource libs to pull that off, It's easy to decompile code or even tamper with your variables in memory at runtime.
There have been plenty discussions on this forum about decompiling and cheating. Bottom line is that in multiplayer games you want to keep all gamelogic on the server and make the clients as dumb as possible. For cheaters its mostly to ruin others game expirience, so you wouldn't really have to bother unless you expect lots and lots of people playing your game (in fact if you'd pull that off you'd be the first one to make a popular FPS in Java that I know of

)