One pasted Terminal command opens the door to Mac crypto wallet theft