Viral AI assistant ‘Clawdbot’ risks leaking private messages, credentials