Stealers and backdoors are spreading under the guise of a DeepSeek client